Vulnerability Category — USE-AFTER-FREE

Chinese name:
释放后重用
Detail：
由于堆管理机制额外引进的复杂的管理机制所造成

Related Vulnerabilities

SSV ID Name
SSV-99654 Adobe Acrobat Reader RCE漏洞（CVE-2023-21608）
SSV-99645 OpenSSH 远程DOS漏洞（CVE-2023-25136）
SSV-99434 XNU race condition leads to type confusion 漏洞(CVE-2021-30909)
SSV-99433 XNU kernel object UAF 漏洞(CVE-2021-30916)
SSV-99253 Exim 4 远程代码执行漏洞（CVE-2020-28018）
SSV-97620 VLC Media Player MKV Use-After-Free
SSV-97509 Microsoft Windows - JScript RegExp.lastIndex Use-After-Free(CVE-2018-8353)
SSV-97486 Linux Kernel AF_PACKET Use After Free (packet_sock)
SSV-97485 Infiniband Linux Driver UAF(CVE-2018-14737)
SSV-97337 MacOS kernel UAF due to lack of locking in nvidia GeForce driver(CVE-2018-4230)
SSV-97334 WebKit: Use-after-free when resuming generator(CVE-2018-4218)
SSV-97331 Microsoft Edge: Chakra: Cross context bug(CVE-2018-0946)
SSV-97148 IE11: Use-after-free in String.lastIndexOf(CVE-2018-0866)
SSV-97147 IE11: Use-after-free in String.localeCompare
SSV-97146 IE11: Use-after-free in Js::RegexHelper::RegexReplace(CVE-2018-0866)
SSV-97003 Windows: use-after-free in jscript!NameTbl::GetValDef(CVE-2017-11903)
SSV-96988 MacOS/iOS multiple kernel UAFs due to incorrect IOKit object lifetime management in IOTimeSyncClockManagerUserClient(CVE-2017-13847)
SSV-96896 Exim Use-After-Free(CVE-2017-16943)
SSV-96894 WebKit: use-after-free in WebCore::FormSubmission::create(CVE-2017-13791)
SSV-96892 WebKit: use-after-free in WebCore::RenderObject::previousSibling(CVE-2017-13798)
SSV-96893 WebKit: use-after-free in WebCore::RenderObject::previousSibling(CVE-2017-13798)
SSV-96891 WebKit: use-after-free in WebCore::DocumentLoader::frameLoader(CVE-2017-13794)
SSV-96890 WebKit: use-after-free in WebCore::Style::TreeResolver::styleForElement(CVE-2017-13802)
SSV-96886 WebKit: use-after-free in WebCore::AXObjectCache::performDeferredCacheUpdate(CVE-2017-13795)
SSV-96885 WebKit: use-after-free in WebCore::PositionIterator::decrement(CVE-2017-13797)
SSV-96884 WebKit: use-after-free in WebCore::InputType::element(CVE-2017-13792)
SSV-96883 WebKit: use-after-free in WebCore::TreeScope::documentScope(CVE-2017-13796)
SSV-96870 Microsoft IE11: use-after-free in jscript!JsErrorToString(CVE-2017-11810)
SSV-96778 Linux Kernel AF_PACKET Use-After-Free(CVE-2017-15649)
SSV-96757 Ruby pack_pack Use After Free Vulnerability(CVE-2016-2338)
SSV-96511 PowerISO ISO Parsing Use After Free(CVE-2017-2823)
SSV-96444 Ledger CLI Account Directive Use-After-Free Vulnerability(CVE-2017-2808)
SSV-96314 WebKit: use-after-free in WebCore::AccessibilityNodeObject::textUnderElement(CVE-2017-7048)
SSV-96313 WebKit: use-after-free in WebCore::AccessibilityRenderObject::handleAriaExpandedChanged(CVE-2017-7043)
SSV-96312 WebKit: use-after-free in WebCore::Node::nextSibling(CVE-2017-7039)
SSV-96310 WebKit: use-after-free in WebCore::InputType::element(CVE-2017-7042)
SSV-96309 WebKit: use-after-free in WebCore::RenderObject with accessibility enabled(CVE-2017-7046)
SSV-96307 WebKit: use-after-free in WebCore::Node::getFlag(CVE-2017-7041)
SSV-96306 WebKit: use-after-free in WebCore::getCachedWrapper(CVE-2017-7040)
SSV-96299 WebKit: JSC: Stack-Use-After-Free in ObjectPatternNode::appendEntry
SSV-93185 WebKit: Element::setAttributeNodeNS UAF
SSV-93156 Apple iOS / MacOS Domain Socket Kernel Use-After-Free(CVE-2017-2501)
SSV-93144 WebKit WebCore::FrameView::scheduleRelayout Use-After-Free(CVE-2017-2514)
SSV-93092 Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-0236)
SSV-92968 Microsoft Edge: Use-after-free in TypedArray.sort（CVE-2016-7288）
SSV-92960 XNU kernel UaF due to lack of locking in set_dp_control_port (CVE-2016-7644)
SSV-92921 WebKit: Use-after-free in JSC::B3::Procedure::resetReachability（CVE-2017-2470）
SSV-92910 WebKit: HTMLInputElement use-after-free (CVE-2017-2454)
SSV-92909 WebKit: use-after-free in RenderLayer（CVE-2017-2455）
SSV-92907 WebKit: use-after-free in FormSubmission::create (CVE-2017-2460)
SSV-92906 WebKit: ComposedTreeIterator::traverseNextInShadowTree use-after-free（CVE-2017-2466）
SSV-92905 WebKit: table use-after-free（CVE-2017-2471）
SSV-92904 WebKit: WebCore::toJS use-after-free（CVE-2017-2476）
SSV-92891 MacOS kernel uaf due to double-release in posix_spawn（CVE-2017-2472）
SSV-92866 Apple WebKit: HTMLFormElement::reset() use-after free（CVE-2017-2362）
SSV-92858 Mozilla Firefox: use-after-poison in nsStylePadding::GetPadding
SSV-92853 Mozilla Firefox table use-after-free（CVE-2017-5404）
SSV-92836 APPLE OS X AND IOS X509 CERTIFICATE PARSING NAME CONSTRAINTS REMOTE CODE EXECUTION VULNERABILITY
SSV-92797 Microsoft Edge 38.14393.0.0 - JavaScript Engine Use-After-Free (CVE-2017-0070)
SSV-92780 Adobe Flash: Use-after-free in MovieClip attach init object (CVE-2017-2932)
SSV-92622 Mozilla Firefox Use-After-Free（CVE-2016-9899）
SSV-92514 Oracle Java Runtime Environment java.awt.Menu Use-After-Free 命令执行漏洞
SSV-92424 Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
SSV-92179 PHP GC算法和反序列化机制释放后重用漏洞
SSV-91637 Linux kernel ping 套接字释放后重利用漏洞
SSV-91603 Linux内核 Keyrings 引用计数溢出 UAF 漏洞
SSV-91438 Foxit Reader 7.3.0 UAF 漏洞
SSV-91419 Microsoft Internet Explorer: UAF in MSHTML!CSVGHelpers::SetAttributeStringAndPointer
SSV-91405 Internet Explorer 11 MSHTML!CMarkupPointer - 释放后重用漏洞
SSV-91392 Microsoft Internet Explorer 释放后重用漏洞(MS14-021)
SSV-91333 Microsoft Internet Explorer CButton 对象 UAF漏洞 任意代码执行漏洞
SSV-91275 Internet Explorer - MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free (MS16-023)
SSV-91273 Windows bitmap内核释放后重用漏洞(CVE-2016-0094)
SSV-90186 X.Org X11 服务器模块释放后重用漏洞
SSV-90137 PHP process_nested_data 函数释放后重用漏洞
SSV-89724 Samba NetLogon未初始化指针漏洞（CVE-2015-0240）
SSV-89407 PHP 5.6 / 5.5 / 5.4 Session Deserialized Use-After-Free
SSV-88752 Mozilla Firefox 3.6.16 mChannel Use-After-Free漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文