Browse CVEs

HIGH 7.8 CVE-2015-0568 Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, … Linux Kernel after 3.19.8 Fix from $1,9502016-08-07 CRITICAL 9.8 CVE-2016-5142 The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers,… Chrome after 52.0.2743.82 Fix from $2,3002016-08-07 CRITICAL 9.8 CVE-2016-5771EPSS 15% spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage co… PHP 5.5.37 / 5.6.23+ Fix from $2,3002016-08-07 HIGH 7.3 CVE-2016-3841 The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (us… Linux Kernel 3.2.75 / 3.12.52+ Fix from $1,9502016-08-06 HIGH 8.8 CVE-2016-5264 Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 4… Firefox after 47.0.1 Fix from $1,9502016-08-05 HIGH 8.8 CVE-2016-5259 Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remo… Firefox after 47.0.1 Fix from $1,9502016-08-05 HIGH 8.8 CVE-2016-5258 Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to e… Linux after 47.0.1 Fix from $1,9502016-08-05 HIGH 8.8 CVE-2016-5255 Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbi… Firefox after 47.0.1 Fix from $1,9502016-08-05 CRITICAL 9.8 CVE-2016-5254 Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attack… Firefox after 47.0.1 Fix from $2,3002016-08-05 HIGH 8.8 CVE-2016-5136 Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows r… Chrome after 51.0.2704.106 Fix from $1,9502016-07-23 HIGH 8.8 CVE-2016-5131 Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of ser… Chrome 10.0 / 52.0.2743.82+ Fix from $1,9502016-07-23 HIGH 7.5 CVE-2016-5127 Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote att… Chrome after 51.0.2704.106 Fix from $1,9502016-07-23 HIGH 8.8 CVE-2016-1708 The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider o… Chrome after 51.0.2704.106 Fix from $1,9502016-07-23 HIGH 7.8 CVE-2016-4625 Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors. Mac Os X after 10.11.5 Fix from $1,9502016-07-22 HIGH 7.8 CVE-2016-1863 The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause… Iphone Os 2.2.2 / 9.2.2+ Fix from $1,9502016-07-22 HIGH 7.8 CVE-2016-4994 Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (progr… Gimp 2.8.18+ Fix from $1,9502016-07-12 MEDIUM 6.5 CVE-2016-3189EPSS 16% Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, re… Python 3.7.13 / 3.8.13+ Fix from $1,6002016-06-30 CRITICAL 9.8 CVE-2016-4121EPSS 10% Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.… Flash Player after 21.0.0.241 Fix from $2,3002016-06-16 HIGH 7.8 CVE-2016-4805 Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memor… Enterprise Linux 3.2.80 / 3.10.102+ Fix from $1,9502016-05-23 MEDIUM 5.5 CVE-2016-1837EPSS 8% Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in … Ubuntu Linux Patch available Fix from $1,6002016-05-20 MEDIUM 5.5 CVE-2016-1836EPSS 8% Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, t… Ubuntu Linux Patch available Fix from $1,6002016-05-20 HIGH 7.8 CVE-2016-1819EPSS 10% Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, an… Tvos 2.2.1 / 9.2.1+ Fix from $1,9502016-05-20 HIGH 8.8 CVE-2015-8823EPSS 6% Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Wi… Flash Player after 19.0.0.245 Fix from $1,9502016-04-22 HIGH 8.8 CVE-2016-1568 Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service… Openstack after 2.5.1.1 Fix from $1,9502016-04-12 HIGH 8.8 CVE-2016-1031EPSS 5% Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.… Flash Player after 21.0.0.197 Fix from $1,9502016-04-09 HIGH 8.8 CVE-2016-1017EPSS 6% Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windo… Flash Player after 21.0.0.197 Fix from $1,9502016-04-09 HIGH 8.8 CVE-2016-1016EPSS 6% Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 o… Flash Player after 21.0.0.197 Fix from $1,9502016-04-09 HIGH 8.8 CVE-2016-1013EPSS 23% Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.… Flash Player after 21.0.0.197 Fix from $1,9502016-04-09 HIGH 8.8 CVE-2016-1011EPSS 26% Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.… Flash Player after 21.0.0.197 Fix from $1,9502016-04-09 HIGH 7.8 CVE-2016-1750 Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to … Iphone Os 2.2 / 9.2+ Fix from $1,9502016-03-24