CVE-2019-1010177 | ByteOS Network

Vulnerability Details :

CVE-2019-1010177

Assigner-dwf

Assigner Org ID-7556d962-6fb7-411e-85fa-6cd62f095ba8

Published At-24 Jul, 2019 | 11:52

Updated At-05 Aug, 2024 | 03:07

Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:dwf

Assigner Org ID:7556d962-6fb7-411e-85fa-6cd62f095ba8

Published At:24 Jul, 2019 | 11:52

Updated At:05 Aug, 2024 | 03:07

▼CVE Numbering Authority (CNA)

Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d.

Affected Products

Vendor

Product

Versions

Affected

2.4.70 2.047 [fixed: after commit 48a66c798d]

Problem Types

Type	CWE ID	Description
text	N/A	Use After Free

Type: text

CWE ID: N/A

Description: Use After Free

References

Hyperlink	Resource
https://jsish.org/fossil/jsi/tktview?name=65c8965977	x_refsource_CONFIRM

Hyperlink: https://jsish.org/fossil/jsi/tktview?name=65c8965977

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://jsish.org/fossil/jsi/tktview?name=65c8965977	x_refsource_CONFIRM x_transferred

Hyperlink: https://jsish.org/fossil/jsi/tktview?name=65c8965977

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:josh@bress.net

Published At:24 Jul, 2019 | 12:15

Updated At:01 Aug, 2019 | 15:45

Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

jsish>>jsish>>2.4.70_2.047

cpe:2.3:a:jsish:jsish:2.4.70_2.047:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://jsish.org/fossil/jsi/tktview?name=65c8965977	josh@bress.net	Exploit Vendor Advisory

Hyperlink: https://jsish.org/fossil/jsi/tktview?name=65c8965977

Source: josh@bress.net

Resource:

Exploit

Vendor Advisory

Similar CVEs

456Records found

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-5.71% / 90.07%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos tvOS watchOS iOS

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-5.3||MEDIUM

EPSS-1.51% / 80.44%

||

7 Day CHG~0.00%

Published-31 Jul, 2018 | 21:00

Updated-06 Aug, 2024 | 02:27

The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.

Vendor-CURL

Product-curl curl

CWE ID-CWE-416

Use After Free

CWE ID-CWE-415

Double Free

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.51% / 65.33%

||

7 Day CHG~0.00%

Published-09 Sep, 2019 | 00:00

Updated-05 Aug, 2024 | 01:10

An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion.

Vendor-isahc_project n/a

Product-isahc n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.62%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.62%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:26

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-6.22% / 90.51%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos tvOS watchOS iOS

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.93% / 85.89%

||

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:27

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-airport_base_station_firmware AirPort Base Station Firmware Update

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.62%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-4

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-9.8||CRITICAL

EPSS-1.26% / 78.62%

||

7 Day CHG~0.00%

Published-26 Sep, 2018 | 20:00

Updated-16 Sep, 2024 | 22:03

Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution.

Vendor-Fuji Electric Co., Ltd.

Product-v-server_firmware v-server V-Server

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.62%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.62%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.67% / 81.39%

||

7 Day CHG~0.00%

Published-22 Feb, 2019 | 23:00

Updated-04 Aug, 2024 | 21:31

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.

Vendor-n/a openSUSE NetApp, Inc.Canonical Ltd.Debian GNU/Linux The PHP Group

Product-ubuntu_linux php debian_linux storage_automation_store leap n/a

CWE ID-CWE-416

Use After Free

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.62%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-6.7||MEDIUM

EPSS-0.09% / 25.69%

||

7 Day CHG~0.00%

Published-06 Sep, 2019 | 21:46

Updated-04 Aug, 2024 | 21:46

In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-416

Use After Free

CWE ID-CWE-667

Improper Locking

Matching Score-4

Assigner-Apple Inc.

Matching Score-4

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-8.05% / 91.78%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-5.3||MEDIUM

EPSS-3.57% / 87.28%

||

7 Day CHG~0.00%

Published-01 Aug, 2018 | 06:00

Updated-06 Aug, 2024 | 02:27

The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

Vendor-CURL

Product-curl curl

CWE ID-CWE-416

Use After Free

CWE ID-CWE-415

Double Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-30.10% / 96.51%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 20:08

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-30.10% / 96.51%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:52

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-1.97% / 82.79%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1089, CVE-2016-1091, CVE-2016-6944, CVE-2016-6945, CVE-2016-6946, CVE-2016-6949, CVE-2016-6952, CVE-2016-6961, CVE-2016-6962, CVE-2016-6963, CVE-2016-6964, CVE-2016-6965, CVE-2016-6967, CVE-2016-6968, CVE-2016-6969, CVE-2016-6971, CVE-2016-6979, CVE-2016-6988, and CVE-2016-6993.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-30.10% / 96.51%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:53

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-19.87% / 95.24%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:54

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.07% / 76.82%

||

7 Day CHG~0.00%

Published-29 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition.

Vendor-n/a Artifex Software Inc.

Product-mujs n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:23

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-1.97% / 82.79%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1089, CVE-2016-1091, CVE-2016-6945, CVE-2016-6946, CVE-2016-6949, CVE-2016-6952, CVE-2016-6953, CVE-2016-6961, CVE-2016-6962, CVE-2016-6963, CVE-2016-6964, CVE-2016-6965, CVE-2016-6967, CVE-2016-6968, CVE-2016-6969, CVE-2016-6971, CVE-2016-6979, CVE-2016-6988, and CVE-2016-6993.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:32

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 13:23

Updated-04 Aug, 2024 | 20:54

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-1.97% / 82.79%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1089, CVE-2016-1091, CVE-2016-6944, CVE-2016-6945, CVE-2016-6946, CVE-2016-6949, CVE-2016-6952, CVE-2016-6953, CVE-2016-6961, CVE-2016-6962, CVE-2016-6963, CVE-2016-6964, CVE-2016-6967, CVE-2016-6968, CVE-2016-6969, CVE-2016-6971, CVE-2016-6979, CVE-2016-6988, and CVE-2016-6993.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-1.97% / 82.79%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1089, CVE-2016-1091, CVE-2016-6944, CVE-2016-6946, CVE-2016-6949, CVE-2016-6952, CVE-2016-6953, CVE-2016-6961, CVE-2016-6962, CVE-2016-6963, CVE-2016-6964, CVE-2016-6965, CVE-2016-6967, CVE-2016-6968, CVE-2016-6969, CVE-2016-6971, CVE-2016-6979, CVE-2016-6988, and CVE-2016-6993.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:56

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 17:59

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 13:24

Updated-04 Aug, 2024 | 20:54

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:02

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:56

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-30.10% / 96.51%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:51

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.17% / 89.50%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:58

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 13:47

Updated-04 Aug, 2024 | 20:54

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-6.52% / 90.73%

||

7 Day CHG~0.00%

Published-26 Sep, 2016 | 17:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4263.

Vendor-n/a Adobe Inc.

Product-digital_editions n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 15:06

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 15:09

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Chrome

Matching Score-4

Assigner-Chrome

CVSS Score-7.5||HIGH

EPSS-0.61% / 68.79%

||

7 Day CHG~0.00%

Published-05 Jun, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images.

Vendor-n/a Google LLC Debian GNU/Linux

Product-debian_linux chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.17% / 89.50%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:47

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.20% / 94.77%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:00

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-6.60% / 90.79%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 18:01

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-10.74% / 93.05%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 18:13

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 13:46

Updated-04 Aug, 2024 | 20:54

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 13:21

Updated-04 Aug, 2024 | 20:54

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-30.10% / 96.51%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:50

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-35.34% / 96.92%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:47

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-30.10% / 96.51%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 20:05

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-4

Assigner-Adobe Systems Incorporated

Matching Score-4

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.07% / 83.24%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 13:57

Updated-04 Aug, 2024 | 20:54

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free