Skip to main content

CWE archive

CWE-416 CVEs

Programmatic archive

8,182 CVEs tagged with CWE-416938 Critical, 5,903 High, 1,218 Medium, 123 Low, 0 Unrated.

CVE-2016-5264

Published Aug 5, 2016

Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2016-5259

Published Aug 5, 2016

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitr…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2016-5258

Published Aug 5, 2016

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by lever…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2016-5255

Published Aug 5, 2016

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScr…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2016-5254

Published Aug 5, 2016

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2016-6295

Published Jul 25, 2016

ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remot…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2016-6290

Published Jul 25, 2016

ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to ca…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2016-5136

Published Jul 23, 2016

Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a den…

CVSS 8.8 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2016-5131

Published Jul 23, 2016

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecif…

CVSS 8.8 · High
evidence mentions
1
Buzz score
11.9

CVE-2016-5127

Published Jul 23, 2016

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of se…

CVSS 7.5 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2016-1708

Published Jul 23, 2016

The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progres…

CVSS 8.8 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2016-4625

Published Jul 22, 2016

Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2016-4994

Published Jul 12, 2016

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2016-3189

Published Jun 30, 2016

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to bef…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort
Showing 7,826-7,850 of 8,182 CVEsPage 314 of 328