ByteOS

Product:Internet Explorer

Added At:03 Nov, 2021

Due At:17 Nov, 2021

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

Used in Ransomware

Known

CWE

CWE-416

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2021-26411

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:11 Mar, 2021 | 15:07

Updated At:21 Oct, 2025 | 23:25

▼CVE Numbering Authority (CNA)

Internet Explorer Memory Corruption Vulnerability

Affected Products

Vendor

Product

Internet Explorer 9

CPEs

cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

Platforms

Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2

Versions

Affected

From 1.0.0 before publication (custom)

Vendor

Product

Internet Explorer 11

CPEs

cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*

Platforms

Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016

Versions

Affected

From 1.0.0 before publication (custom)

Vendor

Microsoft Edge (EdgeHTML-based)

Product

CPEs

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Platforms

Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016

Versions

Affected

From 1.0..0 before publication (custom)

Problem Types

Type	CWE ID	Description
Impact	N/A	Remote Code Execution

Type: Impact

CWE ID: N/A

Description: Remote Code Execution

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C

References

Hyperlink	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411	x_refsource_MISC

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411	x_refsource_MISC x_transferred

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-416	CWE-416 Use After Free

Type: CWE

CWE ID: CWE-416

Description: CWE-416 Use After Free

Metrics Other Info

kev

dateAdded:

2021-11-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411

Timeline

Event	Date
CVE-2021-26411 added to CISA KEV	2021-11-03 00:00:00

Event: CVE-2021-26411 added to CISA KEV

Date: 2021-11-03 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411

Resource:

government-resource

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:11 Mar, 2021 | 16:15

Updated At:30 Oct, 2025 | 19:56

Internet Explorer Memory Corruption Vulnerability

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2021-11-03	2021-11-17	Microsoft Internet Explorer Memory Corruption Vulnerability	Apply updates per vendor instructions.

Date Added: 2021-11-03

Due Date: 2021-11-17

Vulnerability Name: Microsoft Internet Explorer Memory Corruption Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	5.1	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:P

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 5.1

Base severity: MEDIUM

Vector:

AV:N/AC:H/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

>>edge>>-

cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*

>>windows_10_1507>>-

cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*

>>windows_10_1607>>-

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*

>>windows_10_1803>>-

cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*

>>windows_10_1809>>-

cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*

>>windows_10_1909>>-

cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*

>>windows_10_2004>>-

cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*

>>windows_10_20h2>>-

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

>>windows_server_2016>>-

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

>>windows_server_2019>>-

cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*

>>internet_explorer>>11

cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*

>>windows_10_1507>>-

cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*

>>windows_10_1607>>-

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*

>>windows_10_1803>>-

cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*

>>windows_10_1809>>-

cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*

>>windows_10_1909>>-

cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*

>>windows_10_2004>>-

cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*

>>windows_10_20h2>>-

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

>>windows_7>>-

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

>>windows_8.1>>-

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

>>windows_rt_8.1>>-

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

>>windows_server_2012>>-

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

>>windows_server_2012>>r2

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

>>windows_server_2016>>-

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

>>windows_server_2019>>-

cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

>>internet_explorer>>9

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

>>windows_server_2008>>-

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov
CWE-416	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-416

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411	secure@microsoft.com	Patch Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

Similar CVEs

4325Records found

CVE-2026-9984

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.23% / 14.33%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Google LLC

Product-windows chrome Chrome

CWE ID-CWE-416

Use After Free

CVE-2026-9873

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.30% / 22.14%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2015-8653

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.93% / 94.09%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8655, CVE-2015-8821, and CVE-2015-8822.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2026-9126

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.40% / 31.98%

7 Day CHG~0.00%

Published-20 May, 2026 | 19:12

Updated-05 Jun, 2026 | 17:20

Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Google LLC Apple Inc.

CWE ID-CWE-416

Use After Free

CVE-2008-0077

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-37.19% / 98.36%

7 Day CHG~0.00%

Published-12 Feb, 2008 | 22:00

Updated-23 Apr, 2026 | 00:35

Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer windows_vista windows_xp windows_2000 windows_2003_server windows_server_2003 n/a

CWE ID-CWE-416

Use After Free

CVE-2024-11112

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-7.5||HIGH

EPSS-0.34% / 26.61%

7 Day CHG~0.00%

Published-12 Nov, 2024 | 20:09

Updated-02 Jan, 2025 | 18:02

Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Vendor-Google LLC Microsoft Corporation

Product-chrome windows Chrome chrome

CWE ID-CWE-416

Use After Free

CVE-2016-1016

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.10% / 92.63%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1017, and CVE-2016-1031.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-1031

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.08% / 91.41%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-1017

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.10% / 92.64%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2026-9927

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.30% / 22.37%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2026-9961

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.24% / 15.51%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:57

Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2016-1013

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-22.81% / 97.48%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-0973

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.50% / 91.91%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-0975

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.50% / 91.91%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code by leveraging improper reference handling, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-0988

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.08% / 91.41%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 x14j_firmware mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-0984

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-55.38% / 98.93%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-22 Apr, 2026 | 13:01

Known KEV||Action Due Date - 2022-06-15||The impacted products are end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.Linux Kernel Organization, Inc Google LLC

Product-mac_os_x air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a Flash Player and AIR

CWE ID-CWE-416

Use After Free

CVE-2016-0999

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-29.84% / 98.00%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0998

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-29.59% / 97.99%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-1000

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-29.84% / 98.00%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-0999.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0994

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-8.04% / 94.15%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code by using the actionCallMethod opcode with crafted arguments, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0990

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.25% / 93.65%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0987

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.42% / 92.94%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0974

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-30.77% / 98.05%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-0996

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.14% / 93.57%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via crafted arguments, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-1011

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-25.64% / 97.73%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-0991

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.08% / 91.41%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0997

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-29.80% / 98.00%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0995

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.42% / 92.94%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000.

Vendor-n/a Apple Inc.Samsung Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-0983

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.93% / 92.44%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2026-9883

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.29% / 21.13%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2026-9978

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.23% / 14.33%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2015-8822

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.52% / 93.02%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2026-9114

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.36% / 28.89%

7 Day CHG~0.00%

Published-20 May, 2026 | 19:12

Updated-21 May, 2026 | 16:56

Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2015-8821

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.66% / 93.92%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2015-8823

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.43% / 92.95%

7 Day CHG~0.00%

Published-22 Apr, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted text property, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, CVE-2015-8821, and CVE-2015-8822.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk windows_8.0 android flash_player_desktop_runtime air linux_kernel chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2015-8655

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.93% / 94.09%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2026-9962

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.36% / 27.84%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2021-30611

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.80% / 84.89%

7 Day CHG~0.00%

Published-03 Sep, 2021 | 19:25

Updated-03 Aug, 2024 | 22:40

Chromium: CVE-2021-30611 Use after free in WebRTC

Vendor-Fedora Project Microsoft Corporation

Product-edge_chromium fedora edge Microsoft Edge (Chromium-based)

CWE ID-CWE-416

Use After Free

CVE-2021-30606

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-4.12% / 89.69%

7 Day CHG~0.00%

Published-03 Sep, 2021 | 19:25

Updated-03 Aug, 2024 | 22:40

Chromium: CVE-2021-30606 Use after free in Blink

Vendor-Fedora Project Microsoft Corporation

Product-edge_chromium fedora edge Microsoft Edge (Chromium-based)

CWE ID-CWE-416

Use After Free

CVE-2026-9878

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.31% / 23.35%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2026-9118

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.40% / 31.98%

7 Day CHG~0.00%

Published-20 May, 2026 | 19:12

Updated-21 May, 2026 | 16:45

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2026-9992

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.23% / 14.33%

7 Day CHG~0.00%

Published-28 May, 2026 | 22:25

Updated-30 May, 2026 | 03:55

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2024-43459

Matching Score-10

Matching Score-10

Product-sql_server_2016 sql_server_2019 sql_server_2017 Microsoft SQL Server 2019 (GDR)Microsoft SQL Server 2017 (GDR)Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack Microsoft SQL Server 2017 (CU 31)Microsoft SQL Server 2019 (CU 29)Microsoft SQL Server 2016 Service Pack 3 (GDR)

CVSS Score-8.8||HIGH

EPSS-1.58% / 72.77%

7 Day CHG~0.00%

Published-12 Nov, 2024 | 17:53

Updated-08 Jul, 2025 | 15:41

SQL Server Native Client Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

CWE ID-CWE-416

Use After Free

CVE-2026-8518

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.28% / 20.14%

7 Day CHG~0.00%

Published-14 May, 2026 | 19:52

Updated-18 May, 2026 | 19:17

Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

CWE ID-CWE-416

Use After Free

CVE-2026-9111

Matching Score-10

Assigner-Chrome