CVE-2025-43478 | ByteOS Network

Vulnerability Details :

CVE-2025-43478

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-04 Nov, 2025 | 01:15

Updated At-17 Dec, 2025 | 20:46

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause unexpected system termination.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:04 Nov, 2025 | 01:15

Updated At:17 Dec, 2025 | 20:46

▼CVE Numbering Authority (CNA)

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause unexpected system termination.

Affected Products

Vendor

Product

Versions

Affected

From unspecified before 14.8 (custom)

Vendor

Product

Versions

Affected

From unspecified before 26.1 (custom)

Vendor

Product

Versions

Affected

From unspecified before 15.7 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	An app may be able to cause unexpected system termination

Type: N/A

CWE ID: N/A

Description: An app may be able to cause unexpected system termination

References

Hyperlink	Resource
https://support.apple.com/en-us/125636	N/A
https://support.apple.com/en-us/125634	N/A
https://support.apple.com/en-us/125635	N/A

Hyperlink: https://support.apple.com/en-us/125636

Resource: N/A

Hyperlink: https://support.apple.com/en-us/125634

Resource: N/A

Hyperlink: https://support.apple.com/en-us/125635

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-416	CWE-416 Use After Free

Type: CWE

CWE ID: CWE-416

Description: CWE-416 Use After Free

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:product-security@apple.com

Published At:04 Nov, 2025 | 02:15

Updated At:17 Dec, 2025 | 21:16

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause unexpected system termination.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CPE Matches

>>macos>>Versions from 14.0(inclusive) to 14.8.2(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 15.0(inclusive) to 15.7.2(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-416

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/125634	product-security@apple.com	N/A
https://support.apple.com/en-us/125635	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/125636	product-security@apple.com	Release Notes Vendor Advisory

Hyperlink: https://support.apple.com/en-us/125634

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://support.apple.com/en-us/125635

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/125636

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Similar CVEs

1132Records found

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.34% / 84.65%

||

7 Day CHG~0.00%

Published-03 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC Apple Inc.

Product-iphone_os itunes safari chrome n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-12.12% / 93.69%

||

7 Day CHG-2.30%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tvos tvOS macOS watchOS iOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-502

Deserialization of Untrusted Data

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-4.3||MEDIUM

EPSS-2.91% / 86.19%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:19

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.93% / 86.24%

||

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:27

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-airport_base_station_firmware AirPort Base Station Firmware Update

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.12% / 30.83%

||

7 Day CHG~0.00%

Published-24 Sep, 2025 | 16:17

Updated-26 Feb, 2026 | 17:48

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Linux Kernel Organization, Inc Google LLC Microsoft Corporation

Product-chrome linux_kernel macos windows Chrome

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-1.27% / 79.30%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code by leveraging improper EScript exception handling, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7621.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.23% / 45.24%

||

7 Day CHG~0.00%

Published-15 Oct, 2024 | 20:14

Updated-02 Jan, 2025 | 18:12

Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Vendor-Apple Inc.Google LLC

Product-chrome iphone_os Chrome chrome

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.55% / 67.60%

||

7 Day CHG~0.00%

Published-01 Apr, 2020 | 17:57

Updated-04 Aug, 2024 | 10:43

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.86%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:26

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:18

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-1.27% / 79.30%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7617, and CVE-2015-7621.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:17

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-12.10% / 93.69%

||

7 Day CHG-2.30%

Published-18 Dec, 2019 | 17:33

Updated-23 Oct, 2025 | 18:52

Known KEV||Action Due Date - 2022-07-18||Apply updates per vendor instructions.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-iphone_os tvos mac_os_x watchos iOS tvOS watchOS macOS Multiple Products

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.59% / 68.96%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:51

Updated-03 Aug, 2024 | 22:48

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos watchOS macOS iOS and iPadOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-3.37% / 87.19%

||

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server macos android Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 22.85%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A local attacker may be able to cause unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipad_os ipados iOS and iPadOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-6.3||MEDIUM

EPSS-0.77% / 73.27%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.86% / 86.08%

||

7 Day CHG~0.00%

Published-16 Oct, 2020 | 16:40

Updated-04 Aug, 2024 | 10:43

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 74.01%

||

7 Day CHG~0.00%

Published-08 Dec, 2020 | 19:21

Updated-04 Aug, 2024 | 10:50

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari tvOS iOS and iPadOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 74.05%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.89% / 75.24%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos watchOS macOS iOS and iPadOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:17

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-1.78% / 82.46%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

The ANShareFile2 method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7620, and CVE-2015-7623.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-8.46% / 92.23%

||

7 Day CHG+3.99%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos tvOS watchOS iOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:19

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-1.27% / 79.30%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted U3D object, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7617.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-6.8||MEDIUM

EPSS-1.30% / 79.53%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.54% / 67.20%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-23 Oct, 2025 | 18:52

Known KEV||Action Due Date - 2023-05-08||Apply updates per vendor instructions.

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS macOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:26

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-17.81% / 95.03%

||

7 Day CHG~0.00%

Published-27 Jan, 2020 | 23:12

Updated-04 Aug, 2024 | 21:17

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.32%

||

7 Day CHG~0.00%

Published-16 Nov, 2023 | 16:16

Updated-04 Sep, 2024 | 20:40

ZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows premiere_pro macos Premiere Pro premiere_pro

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.16% / 36.58%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:48

Updated-23 Oct, 2025 | 14:53

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Vendor-Apple Inc.

Product-tvos watchos ipados macos safari iphone_os Safari iOS and iPadOS tvOS watchOS macOS Multiple Products

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:18

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:26

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-7.5||HIGH

EPSS-0.18% / 39.51%

||

7 Day CHG~0.00%

Published-14 Nov, 2025 | 02:29

Updated-26 Feb, 2026 | 16:56

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. (Chromium security severity: Medium)

Vendor-Apple Inc.Google LLC

Product-iphone_os chrome Chrome

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-5.03% / 89.59%

||

7 Day CHG-0.79%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.53% / 66.89%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:28

Updated-03 Aug, 2024 | 22:40

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application could execute arbitrary code leading to compromise of user information.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.52% / 85.21%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.88% / 86.11%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.52% / 85.21%

||

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-5.27% / 89.86%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-15.50% / 94.56%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:55

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.03% / 83.59%

||

7 Day CHG~0.00%

Published-12 Sep, 2019 | 18:07

Updated-04 Aug, 2024 | 21:10

Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

Vendor-Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-linux_kernel windows_8.1 chrome_os windows flash_player_desktop_runtime macos windows_10 flash_player Flash Player

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.1||HIGH

EPSS-0.18% / 40.05%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:44

Updated-03 Aug, 2024 | 22:40

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-21.74% / 95.66%

||

7 Day CHG~0.00%

Published-20 Aug, 2019 | 20:06

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-1.42% / 80.40%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 18:08

Updated-04 Aug, 2024 | 21:02

Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 enterprise_linux_desktop flash_player Adobe Flash Player

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.00% / 83.48%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 17:59

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

Matching Score-6

Assigner-Adobe Systems Incorporated

Matching Score-6

Assigner-Adobe Systems Incorporated

CVSS Score-6.5||MEDIUM

EPSS-7.31% / 91.56%

||

7 Day CHG~0.00%

Published-22 May, 2019 | 17:31

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free