Browse CVEs

HIGH 8.8 CVE-2021-38496 During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploi… Firefox 78.15 / 91.2+ Fix from $1,9502021-11-03 HIGH 7.5 CVE-2021-38498 During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially … Firefox 91.2 / 93.0+ Fix from $1,9502021-11-03 CRITICAL 9.6 CVE-2020-6492 Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… Chrome 83.0.4103.97+ Fix from $2,3002021-11-02 HIGH 8.8 CVE-2021-37982 Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37983 Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37985 Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to… Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37987 Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37988 Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to po… Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37993 Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37977 Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 94.0.4606.81+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-30809 A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Pro… Safari 8.0 / 12.0.1+ Fix from $1,9502021-10-28 MEDIUM 5.5 CVE-2021-22463 A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosu… Harmonyos Mitigation only Fix from $1,6002021-10-28 MEDIUM 5.5 CVE-2021-22466 A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash. Harmonyos Mitigation only Fix from $1,6002021-10-28 HIGH 7.8 CVE-2021-43057 An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) co… Linux Kernel 5.14.8+ Fix from $1,9502021-10-28 MEDIUM 6.5 CVE-2021-40125 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Secure Firewall Threat Defense 6.4.0.13 / 6.6.5+ Fix from $1,6002021-10-27 MEDIUM 6.5 CVE-2021-37122 There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful ex… Cloudengine 12800 Firmware Mitigation only Fix from $1,6002021-10-27 MEDIUM 6.7 CVE-2021-0935 In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with S… Android Mitigation only Fix from $1,6002021-10-25 HIGH 7.8 CVE-2021-0936 In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502021-10-25 MEDIUM 6.7 CVE-2021-0941 In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 6.8 CVE-2021-0703 In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privileg… Android Patch available Fix from $1,6002021-10-22 HIGH 7.8 CVE-2021-0483 In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,9502021-10-22 HIGH 8.1 CVE-2021-38467 A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will… Versiondog 8.0.0+ Fix from $1,9502021-10-22 HIGH 7.8 CVE-2021-30315 Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto Mdm9628 Firmware Patch available Fix from $1,9502021-10-20 HIGH 7.5 CVE-2021-3455 Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For mo… Zephyr 2.6.0+ Fix from $1,9502021-10-19 HIGH 7.8 CVE-2021-21796EPSS 16% An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an objec… Nitro Pro No fix yet Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-38438 A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project … Winproladder after 3.30 Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-40728EPSS 55% Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is… Acrobat Dc after 21.007.20096 Fix from $1,9502021-10-15 HIGH 7.8 CVE-2021-40449 KEVEPSS 74% Win32k Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19086 / 10.0.14393.4704+ Fix from $1,9502021-10-13 CRITICAL 9.0 CVE-2021-21941 A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of n… Eufy Homebase 2 Firmware No fix yet Fix from $2,3002021-10-12 HIGH 8.8 CVE-2021-37970 Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08