The vulnerability in the kernel of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows a hacker to execute arbitrary code with root privileges.

The vulnerability in the kernels of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges...

An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send even when the `CURLOPT_POSTFIELDS` option has been set if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.

...

CVE-2023-28322

An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously wasused to issue a PUT request...

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows a hacker to bypass security restrictions.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows attackers to increase their privileges.

The vulnerability of Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to execute arbitrary code.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Gstreamer multimedia framework lies in its memory management after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gstreamer multimedia framework is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause a service failure using a distorted Matroska file...

The vulnerability of the Google Chrome browser’s Navigation function allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Navigation function is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Web page rendering module in the Safari browser, developed by WebKit, and in the iPadOS and iOS operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit browsers of Safari, as well as in the iPadOS and iOS operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Google Input Tools extension for the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Google Input Tools extension for the Google Chrome browser involves the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the L2ALM component in Juniper Networks’ Junos OS-based QFX router series allows a hacker to induce a service failure.

The vulnerability of the L2ALM component Layer 2 Address Learning Manager in Juniper Networks’ Junos OS-based QFX series routers stems from the use of memory after it is freed due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to...

PT-2023-2786 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment, there is n...

PT-2023-2933 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 113.0.5672.126 Description: The issue is related to the use of memory after it has been freed in the Guest View mode of Google Chrome and Microsoft Edge browsers. This could allow a remote attacker to impact th...

The vulnerability of the ndlcremove() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the ndlcremove function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the X.Org Server software, related to the use of memory after it is freed, allows a hacker to increase their privileges.

The vulnerability of the X.Org Server software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created TIFF file...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

PT-2023-2977 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the xfs btree lookup get block function of the Linux kernel. This could potentially allow an attacker to impact the...

The vulnerability of the vhost_net_set_backend function (drivers/vhost/net.c) in the Linux kernel’s virtio subcomponent allows a attacker to cause a service failure and expose sensitive information.

The vulnerability of the vhostnetsetbackend function drivers/vhost/net.c in the Linux kernel’s virtio subcomponent is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure and expose sensitive information...