CVE-2021-40725

Adobe Acrobat Reader DC is affected by CVE-2021-40725, a use-after-free vulnerability in AcroForm listbox that can lead to arbitrary code execution in the current user’s context. The flaw arises from processing AcroForm listbox entries and an attacker can trigger it by convincing a user to visit ...

openSUSE 15 Security Update : nodejs8 (openSUSE-SU-2021:3294-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3294-1 advisory. - nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22930 Note that Nessus has not tested for this issue but has instead relied onl...

SUSE: Security Advisory (SUSE-SU-2021:3296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:3294-1 Security update for nodejs8

nodejs8 was updated to fix the following security issues: - CVE-2021-22930: http2: fixes use after free on close in stream canceling bsc1188917...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.70 and fixes at least the following security issues: Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener after being released CVE-2020-16119...

SUSE-SU-2021:3282-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. bsc1190701 - CVE-2021-21806: Fixed an exploitable use-after-free vulnerability via...

USN-5094-2: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could start and control a VM could possibly use this to expose sensitive information or execute...

CVE-2021-39837

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action that could result in arbitrary code execution in the context of the current user...

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability when processing AcroForms that could result in arbitrary code execution in the context of the current user. User interaction is required ...

CVE-2021-39839

CVE-2021-39839 affects Adobe Acrobat Reader DC and related variants, where a use-after-free in the AcroForm getItem action can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions in...

CVE-2021-39837 Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action that could result in arbitrary code execution in the context of the current user...

CVE-2021-39837

CVE-2021-39837 affects Adobe Acrobat Reader DC: versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a use-after-free flaw in the processing of the AcroForm deleteItemAt action that can lead to arbitrary code execution in the context of the curren...

CVE-2021-41537

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13789...

CVE-2021-41540

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13776...

Design/Logic Flaw

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13789...

CVE-2021-41535

A vulnerability has been identified in NX 1953 Series All versions V1973.3700, NX 1980 Series All versions V1988, Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to...

Ubuntu: Security Advisory (USN-5071-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:1303-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 93.0.4577.63 boo1190096: CVE-2021-30606: Use after free in Blink CVE-2021-30607: Use after free in Permissions CVE-2021-30608: Use after free in Web Share CVE-2021-30609: Use after free in Sign-In CVE-2021-30610: Use after free in...

Design/Logic Flaw

Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30762

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...