Browse CVEs

MEDIUM 5.5 CVE-2020-14373 A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to … Enterprise Linux Patch available Fix from $1,6002020-09-03 MEDIUM 6.4 CVE-2020-15706 GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a fun… Enterprise Linux Atomic Host after 2.04 Fix from $1,6002020-07-29 MEDIUM 6.5 CVE-2020-10730 A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4… Storage 4.10.17 / 4.11.11+ Fix from $1,6002020-07-07 HIGH 7.8 CVE-2020-1712 A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus… Ceph Storage after 244 Fix from $1,9502020-03-31 HIGH 8.8 CVE-2019-7845EPSS 6% Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successf… Enterprise Linux Desktop after 32.0.0.192 Fix from $1,9502019-06-12 HIGH 8.8 CVE-2019-7837EPSS 10% Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successfu… Enterprise Linux Desktop after 32.0.0.171 Fix from $1,9502019-05-22 HIGH 7.8 CVE-2018-15982 KEVEPSS 82% Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to a… Enterprise Linux Desktop after 31.0.0.153 Fix from $1,9502019-01-18 HIGH 7.5 CVE-2017-3145EPSS 28% BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trig… Enterprise Linux Desktop after 9.11.2 Fix from $1,9502019-01-16 CRITICAL 9.8 CVE-2018-12378 A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to… Enterprise Linux Desktop Mitigation only Fix from $2,3002018-10-18 CRITICAL 9.8 CVE-2018-12377 A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted whi… Enterprise Linux Desktop Mitigation only Fix from $2,3002018-10-18 HIGH 8.8 CVE-2018-12363 A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that hel… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 HIGH 8.8 CVE-2018-12360 A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This resu… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 HIGH 7.8 CVE-2018-16540 In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in co… Openshift Container Platform Patch available Fix from $1,9502018-09-05 HIGH 8.8 CVE-2017-15412 Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially e… Enterprise Linux Desktop 2.9.5 / 63.0.3239.84+ Fix from $1,9502018-08-28 CRITICAL 9.8 CVE-2017-7818 A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through … Enterprise Linux Desktop 52.4.0 / 56.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7819 A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from… Enterprise Linux Desktop 52.4.0 / 56.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5434 A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Th… Enterprise Linux Desktop 45.9.0 / 52.1.0+ Fix from $2,3002018-06-11 MEDIUM 5.5 CVE-2016-9591 JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the applic… Enterprise Linux Desktop 2.0.12+ Fix from $1,6002018-03-09 CRITICAL 9.8 CVE-2018-4877EPSS 8% A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Pri… Enterprise Linux Desktop 28.0.0.161+ Fix from $2,3002018-02-06 HIGH 7.8 CVE-2018-4878 KEVEPSS 90% A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Pri… Enterprise Linux Desktop 28.0.0.161+ Fix from $1,9502018-02-06 CRITICAL 9.8 CVE-2017-11215EPSS 6% An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in… Enterprise Linux Desktop after 27.0.0.183 Fix from $2,3002017-12-09 CRITICAL 9.8 CVE-2017-11225EPSS 6% An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in… Enterprise Linux Desktop after 27.0.0.183 Fix from $2,3002017-12-09 HIGH 7.5 CVE-2017-9953 There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial o… Enterprise Linux No fix yet Fix from $1,9502017-06-26 HIGH 8.8 CVE-2017-3071EPSS 6% Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploita… Enterprise Linux after 25.0.0.163 Fix from $1,9502017-05-09 HIGH 8.8 CVE-2017-3073 Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display… Enterprise Linux after 25.0.0.163 Fix from $1,9502017-05-09 HIGH 8.8 CVE-2016-7864EPSS 7% Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitatio… Enterprise Linux Desktop after 23.0.0.205 Fix from $1,9502016-11-08 HIGH 8.8 CVE-2016-7863EPSS 7% Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitatio… Enterprise Linux Desktop after 23.0.0.205 Fix from $1,9502016-11-08 HIGH 8.8 CVE-2016-7862EPSS 7% Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitatio… Enterprise Linux Desktop after 23.0.0.205 Fix from $1,9502016-11-08 HIGH 8.8 CVE-2016-7859EPSS 7% Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitatio… Enterprise Linux Desktop after 23.0.0.205 Fix from $1,9502016-11-08 HIGH 8.8 CVE-2016-7858EPSS 7% Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitatio… Enterprise Linux Desktop after 23.0.0.205 Fix from $1,9502016-11-08