VYPR

CWE-416

Use After Free

VariantStableLikelihood: High

Description

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (8,284)

page 24 of 415
  • CVE-2018-19715CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-19708CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-19707CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-19700CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-19698CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16040CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16039CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16037CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-16036CriJan 18, 2019
    Adobe Inc.
    Acrobat
    risk 0.64cvss 9.8epss 0.05

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free…

  • CVE-2018-6703CriDec 11, 2018
    McAfee
    Agent
    risk 0.64cvss 9.8epss 0.03

    Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging…

  • CVE-2018-8544HigNov 14, 2018
    Microsoft
    Windows Server 2008
    risk 0.64cvss 8.8epss 0.41

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…

  • CVE-2018-12378CriOct 18, 2018
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.03

    A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and…

  • CVE-2018-12377CriOct 18, 2018
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.03

    A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and…

  • CVE-2018-12822CriOct 17, 2018
    Adobe Inc.
    Digital Editions
    risk 0.64cvss 9.8epss 0.07

    Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2018-18408CriOct 17, 2018
    Broadcom Corporation
    Tcpreplay
    risk 0.64cvss 9.8epss 0.02

    A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function post_args() at tcpbridge.c, causing a denial of service or possibly unspecified other impact.

  • CVE-2018-9476CriOct 2, 2018
    Google
    Android
    risk 0.64cvss 9.8epss 0.03

    In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.…

  • CVE-2018-17611CriSep 28, 2018
    Foxitsoftware
    Reader
    risk 0.64cvss 9.8epss 0.03

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.

  • CVE-2018-17610CriSep 28, 2018
    Foxitsoftware
    Reader
    risk 0.64cvss 9.8epss 0.03

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.

  • CVE-2018-17609CriSep 28, 2018
    Foxitsoftware
    Reader
    risk 0.64cvss 9.8epss 0.03

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.

  • CVE-2018-17608CriSep 28, 2018
    Foxitsoftware
    Reader
    risk 0.64cvss 9.8epss 0.03

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.