Browse CVEs

CRITICAL 9.8 CVE-2019-8003 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 201… Acrobat Dc 15.006.30499 / 17.011.30144+ Fix from $2,3002019-08-20 HIGH 8.8 CVE-2019-8013 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 201… Acrobat Dc 15.006.30499 / 17.011.30144+ Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2127 In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-15239 In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier … Linux Kernel Patch available Fix from $1,9502019-08-20 CRITICAL 9.8 CVE-2019-15232 Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in su… Streaming Media 2019-08-16+ Fix from $2,3002019-08-20 MEDIUM 6.4 CVE-2019-15214 An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain… Linux Kernel 5.0.10+ Fix from $1,6002019-08-19 HIGH 7.8 CVE-2018-20976 An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure. Linux Kernel 4.18+ Fix from $1,9502019-08-19 HIGH 7.8 CVE-2016-10905 An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rinde… Linux Kernel 3.16.74 / 4.4.191+ Fix from $1,9502019-08-19 HIGH 7.0 CVE-2016-10906 An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition betwee… Linux Kernel 4.5+ Fix from $1,9502019-08-19 HIGH 8.8 CVE-2019-15140 coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have… Imagemagick Patch available Fix from $1,9502019-08-18 HIGH 7.8 CVE-2019-13514 In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulner… Delta Industrial Automation Dopsoft after 4.00.06.15 Fix from $1,9502019-08-15 HIGH 7.8 CVE-2019-13510EPSS 12% Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened… Arena after 16.00.00 Fix from $1,9502019-08-15 MEDIUM 6.5 CVE-2019-14980 In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacke… Imagemagick 6.9.10-42 / 7.0.8-42+ Fix from $1,6002019-08-12 MEDIUM 5.5 CVE-2019-14294 An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds re… Xpdfreader No fix yet Fix from $1,6002019-07-27 HIGH 7.8 CVE-2018-20856 An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain erro… Linux Kernel 4.18.7+ Fix from $1,9502019-07-26 HIGH 7.8 CVE-2019-5606 In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2… FreeBSD No fix yet Fix from $1,9502019-07-26 HIGH 7.8 CVE-2019-1010127 VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code executi… Vcftools 0.1.15+ Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2298 Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon … Mdm9150 Firmware Mitigation only Fix from $1,9502019-07-25 HIGH 7.0 CVE-2019-2314 Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon … Msm8909w Firmware Patch available Fix from $1,9502019-07-25 HIGH 8.8 CVE-2019-2316 When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdrago… Mdm9640 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2263 Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon … Ipq4019 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2290 Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connect… Mdm9206 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2293 Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IO… Msm8909w Firmware Patch available Fix from $1,9502019-07-25 CRITICAL 9.8 CVE-2019-1010177 Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function… Jsish No fix yet Fix from $2,3002019-07-24 HIGH 8.3 CVE-2019-9818 A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in t… Firefox 60.7 / 67.0+ Fix from $1,9502019-07-23 CRITICAL 9.8 CVE-2019-9820 A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable c… Firefox 60.7 / 60.7.0+ Fix from $2,3002019-07-23 HIGH 8.1 CVE-2019-9821 A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable… Firefox 67.0+ Fix from $1,9502019-07-23 CRITICAL 9.8 CVE-2019-11713 A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable c… Firefox 60.8.0 / 68.0+ Fix from $2,3002019-07-23 CRITICAL 9.8 CVE-2019-11691 A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it h… Firefox 60.7 / 67.0+ Fix from $2,3002019-07-23 CRITICAL 9.8 CVE-2019-11692 A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially ex… Firefox 60.7.0 / 67.0+ Fix from $2,3002019-07-23