Browse CVEs

HIGH 8.8 CVE-2019-11756 Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability… Firefox 71.0+ Fix from $1,9502020-01-08 HIGH 8.8 CVE-2019-11757 When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulte… Firefox 68.2 / 70.0+ Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-0002 In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution wit… Android Patch available Fix from $1,9502020-01-08 MEDIUM 6.5 CVE-2019-13765 Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 78.0.3904.70+ Fix from $1,6002020-01-03 MEDIUM 6.5 CVE-2019-13766 Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 77.0.3865.75+ Fix from $1,6002020-01-03 HIGH 8.8 CVE-2020-5395 FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c. Fedora Patch available Fix from $1,9502020-01-03 MEDIUM 5.5 CVE-2019-20168 An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isom… Gpac No fix yet Fix from $1,6002019-12-31 MEDIUM 5.5 CVE-2019-20169 An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_c… Gpac No fix yet Fix from $1,6002019-12-31 HIGH 7.8 CVE-2019-20090 An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cp… Bento4 No fix yet Fix from $1,9502019-12-30 HIGH 7.8 CVE-2019-20079 The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. Ubuntu Linux 8.1.2136+ Fix from $1,9502019-12-30 HIGH 8.8 CVE-2019-20010 An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. Libredwg No fix yet Fix from $1,9502019-12-27 HIGH 7.5 CVE-2019-20006 An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml… Ezxml after 0.8.6 Fix from $1,9502019-12-26 CRITICAL 9.8 CVE-2019-19950 In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. Debian Linux Patch available Fix from $2,3002019-12-24 CRITICAL 9.8 CVE-2019-19952 In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage. Imagemagick 7.0.9-7+ Fix from $2,3002019-12-24 CRITICAL 9.8 CVE-2019-16464 Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and ea… Acrobat Dc 15.006.30508 / 17.011.30156+ Fix from $2,3002019-12-19 CRITICAL 9.8 CVE-2019-16452EPSS 6% Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and ea… Acrobat Dc 15.006.30508 / 17.011.30156+ Fix from $2,3002019-12-19 CRITICAL 9.8 CVE-2019-16459 Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and ea… Acrobat Dc 15.006.30508 / 17.011.30156+ Fix from $2,3002019-12-19 CRITICAL 9.8 CVE-2019-16445 Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and ea… Acrobat Dc 15.006.30508 / 17.011.30156+ Fix from $2,3002019-12-19 CRITICAL 9.8 CVE-2019-16448 Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and ea… Acrobat Dc 15.006.30508 / 17.011.30156+ Fix from $2,3002019-12-19 HIGH 8.1 CVE-2018-1311EPSS 10% The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been … Xerces C\+\+ 3.2.5+ Fix from $1,9502019-12-18 HIGH 8.8 CVE-2019-8686 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Saf… Safari 7.13 / 10.6+ Fix from $1,9502019-12-18 HIGH 8.8 CVE-2019-8681 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Saf… Safari 7.13 / 10.6+ Fix from $1,9502019-12-18 CRITICAL 9.8 CVE-2019-8647EPSS 13% A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may … Iphone Os 5.3 / 12.4+ Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-8661EPSS 10% A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to c… Mac Os X 10.14.6+ Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-8662EPSS 10% This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able… Iphone Os 5.3 / 10.14.6+ Fix from $2,3002019-12-18 HIGH 8.8 CVE-2019-8644 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Saf… Safari 7.13 / 10.6+ Fix from $1,9502019-12-18 MEDIUM 6.3 CVE-2019-8608 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Saf… Safari 7.12 / 10.14.5+ Fix from $1,6002019-12-18 HIGH 8.8 CVE-2019-8610 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Saf… Safari 7.12 / 10.14.5+ Fix from $1,9502019-12-18 CRITICAL 9.8 CVE-2019-8613EPSS 13% A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker ma… Iphone Os 5.2.1 / 12.3+ Fix from $2,3002019-12-18 HIGH 7.8 CVE-2019-8605 KEVEPSS 17% A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1… Iphone Os 5.2.1 / 10.14.5+ Fix from $1,9502019-12-18