Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-08099)

Apple iOS is the United States Apple Apple company for mobile devices developed by a set of operating systems. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine, currently used by Apple Safari and Google Chrome and other...

Apple OS X kernel memory corruption vulnerability (CNVD-2016-08100)

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A memory corruption vulnerability exists in the kernel in Apple OS X version 10.11.6. A local attacker can exploit this vulnerability to execute arbitrary code with kernel...

Debian GNU/Linux DBD::mysql undefined behavior

The vulnerability of the mylogin function in the Debian GNU/Linux operating system and the DBD::mysql driver is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to have unpredictable effects by using the mysqlerrno function after the mylogin...

CVE-2016-3364

Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

Mozilla Firefox and Firefox ESR 'CanonicalizeXPCOMParticipant' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'CanonicalizeXPCOMParticipant' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB...

Flash Player Code Execution

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Flash Player Code Execution

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Flash Player Code Execution

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Internet Bug Bounty: Use After Free Vulnerability in array_walk()/array_walk_recursive()

https://bugs.php.net/bug.php?id=70713 I think this bugs is still security issue since this bug can be still triggered remotely in some real world&apps. Example: https://github.com/zendframework/zend-loader/blob/ceb32b5129525e1f19b01f37dbbcc6398b0a9635/src/ClassMapAutoloader.phpL210-L215...

Millet bracelet memory vulnerability hackers can get private data-vulnerability warning-the black bar safety net

According to the Open Effect analysis, a common wearable devices in theory, there is an attack or data being intercepted possibilities. ! We have no concerns over wearable devices, the network security? From the Open Effect of the researchers conclusions may not be too optimistic. According to th...

Lepton memory corruption vulnerability (CNVD-2016-05180)

Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...

USN-3030-1 libgd2 vulnerabilities

It was discovered that the GD library incorrectly handled memory when using gdImageScaleTwoPass. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2013-7456 It was discovered that the GD library incorrectly handled certain...

IBM Domino RCE

The IBM Domino electronic document management system has a vulnerability related to memory errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Windows Data Compromise

A vulnerability that allows access to confidential information exists in Windows and is related to kernel memory handling. Exploiting this vulnerability enables a malicious individual to obtain information about memory addresses or other details related to the kernel...

Internet Explorer Code Execution

The Internet Explorer browser contains an unspecified vulnerability related to memory-related errors. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code in the context of the current user through a specially created website...

Firefox ESR Code Execution

The Mozilla Firefox ESR browser contains a vulnerability related to errors occurring when memory is used after it is freed in the imgRequestProxy function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using values of the content types from the image data...

Internet Explorer Code Execution

The Internet Explorer browser contains a vulnerability related to memory handling errors. This vulnerability allows attackers to execute arbitrary code or cause a service failure by accessing objects stored in memory in the context of the current user, through improper access...

Internet Explorer Code Execution

The Internet Explorer browser contains a vulnerability related to the use of memory after its release use-after-free error. This vulnerability allows an attacker to execute arbitrary code or cause a service failure by using a specially created website...

Internet Explorer Code Execution

The Internet Explorer browser contains an unspecified vulnerability related to memory-related errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code through a specially created website...

Google Chrome DoS

Google Chrome browser contains a vulnerability related to memory usage after deallocation, known as a “use-after-free error,” in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp of Blink. Exploiting this vulnerability allows malicious actors to cau...