Browse CVEs

HIGH 8.8 CVE-2017-5043 Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker… Chrome after 57.0.2987.75 Fix from $1,9502017-04-24 MEDIUM 5.5 CVE-2017-7946 The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and… Radare2 Patch available Fix from $1,6002017-04-18 HIGH 7.8 CVE-2017-3057EPSS 7% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerabilit… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-3026EPSS 6% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerabilit… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-3027EPSS 6% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerabilit… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-3035EPSS 7% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerabilit… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-3047EPSS 7% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerabilit… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-3014EPSS 6% Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerabilit… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 CRITICAL 9.8 CVE-2013-6647 A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. Chrome Mitigation only Fix from $2,3002017-04-11 HIGH 7.5 CVE-2017-7185EPSS 11% Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 an… Mongoose Embedded Web Server Library after 6.7 Fix from $1,9502017-04-10 HIGH 7.5 CVE-2016-10211 libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that i… Yara Patch available Fix from $1,9502017-04-03 MEDIUM 5.5 CVE-2016-10217 The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-… Ghostscript Patch available Fix from $1,6002017-04-03 HIGH 7.5 CVE-2017-5924 libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that i… Yara Patch available Fix from $1,9502017-04-03 HIGH 8.8 CVE-2017-2463 An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affec… Safari 6.2 / 10.1+ Fix from $1,9502017-04-02 HIGH 8.8 CVE-2017-2471EPSS 9% An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The i… Safari No fix yet Fix from $1,9502017-04-02 HIGH 7.8 CVE-2017-2472EPSS 10% An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watch… Iphone Os after 10.12.3 Fix from $1,9502017-04-02 HIGH 8.8 CVE-2017-2485 An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watch… Iphone Os after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.8 CVE-2017-2438 An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "AppleRAID" component. It allows attacker… Mac Os X after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.8 CVE-2017-2441EPSS 5% An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watch… Iphone Os after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.8 CVE-2017-2449 An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attacker… Mac Os X after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.8 CVE-2017-7374 Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereferenc… Linux Kernel 4.4.59 / 4.9.20+ Fix from $1,9502017-03-31 CRITICAL 9.8 CVE-2017-7191 The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code v… Irssi after 1.0.1 Fix from $2,3002017-03-27 MEDIUM 5.3 CVE-2017-7264 Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of… Mupdf Patch available Fix from $1,6002017-03-26 MEDIUM 5.5 CVE-2016-3179 The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and daemon crash… Minissdpd Patch available Fix from $1,6002017-03-24 HIGH 7.8 CVE-2016-10051 Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service… Imagemagick Patch available Fix from $1,9502017-03-23 MEDIUM 5.5 CVE-2017-6966 readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 bin… Binutils No fix yet Fix from $1,6002017-03-17 HIGH 7.5 CVE-2017-0070EPSS 68% A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft brow… Edge Patch available Fix from $1,9502017-03-17 CRITICAL 9.8 CVE-2016-10188 Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary… Bitlbee after 3.4.2 Fix from $2,3002017-03-14 HIGH 7.0 CVE-2017-6874 Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash… Linux Kernel 4.9.16 / 4.10.4+ Fix from $1,9502017-03-14 HIGH 7.0 CVE-2016-10200 Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of se… Linux Kernel 3.2 / 3.2.88+ Fix from $1,9502017-03-07