983 matches found
CVE-2023-32172
Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The...
CVE-2023-27331
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2023-51568
Kofax Power PDF is affected by a Use-After-Free vulnerability in the OXPS file parser. The flaw occurs when the parser processes OXPS objects without validating their existence, allowing a local attacker to disclose sensitive information via crafted input. The issue can be leveraged in conjunctio...
CVE-2023-51565
Affected product: Kofax Power PDF. Vulnerability in XPS file parsing leads to use-after-free, allowing remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user interaction; root cause is failure to validate object existence before operations....
CVE-2023-51563
CVE-2023-51563 : Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution vulnerability in the XPS parsing path. The flaw arises from not validating the existence of an object before operating on it, causing a use-after-free that enables code execution in the current process. Exploit...
CVE-2023-50196
Technical details (affected product/version, exploit specifics, and remediation) are not public in the provided documents. Monitor for updates from official advisories for CVE-2023-50196.
CVE-2023-50193
The CVE-2023-50193 entry concerns Trimble SketchUp Viewer: SKP file parsing leads to a use-after-free that enables remote code execution. The flaw arises from not validating the existence of an object before operating on it, allowing an attacker to run code in the process context. Exploitation re...
CVE-2023-50191
CVE-2023-50191 affects Trimble SketchUp Viewer via a vulnerability in SKP file parsing, described as a use-after-free that allows remote code execution. The flaw arises from not validating the existence of an object before performing operations, enabling an attacker to run code in the target proc...
CVE-2023-50189 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...
CVE-2023-50189 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...
CVE-2023-44446 GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability
GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending...
CVE-2023-44435 Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2023-42096 Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2023-42094 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2023-42093
CVE-2023-42093 pertains to Foxit PDF Reader. The flaw is in how Annotation objects are handled, specifically a failure to validate object existence before operations, enabling a use-after-free that could disclose sensitive information and, in conjunction with other vulnerabilities, may allow arbi...
CVE-2023-42082
CVE-2023-42082 affects PDF-XChange Editor and relates to a Use-After-Free in JPG file parsing. The flaw occurs when the code does not validate the existence of an object before performing operations, enabling an attacker to execute code in the context of the targeted process after user interactio...
CVE-2023-42040
CVE-2023-42040 affects PDF-XChange Editor. The vulnerability is a Use-After-Free in the mailForm method , caused by not validating the existence of an object before performing operations. This can allow an attacker to execute arbitrary code with the current process context. Exploitation requires ...
CVE-2023-40491
CVE-2023-40491 affects Maxon Cinema 4D and relates to parsing of SKP files. The root cause is a use-after-free in the SKP file parser due to not validating the existence of an object before operating on it, enabling a remote code execution when a user opens a malicious SKP/file or visits a malici...
CVE-2023-40491 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2023-40488 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a...