Weaknesses of type CWE-415

291 results
CVE-2018-0469Cisco IOS XE Software Web UI Denial of Service VulnerabilityEPSS 3.1%CVE-2021-27033HIGHDouble Free File Parsing Vulnerability in Autodesk Design ReviewEPSS 3.0%CVE-2022-42915HIGHcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection EPSS 2.9%CVE-2020-16217Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fiEPSS 2.9%CVE-2021-31449HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 2.8%CVE-2023-33137HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.7%CVE-2019-5797HIGHDouble free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 2.7%CVE-2020-1647CRITICALJunos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabledEPSS 2.6%CVE-2019-5460Double Free in VLC versions <= 3.0.6 leads to a crash.EPSS 2.5%CVE-2021-36088CRITICALFluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).EPSS 2.4%CVE-2021-23158A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allEPSS 2.3%CVE-2018-8835Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allEPSS 2.1%CVE-2021-42533HIGHAdobe Bridge DCM File Parsing Double Free Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-4091A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series ofEPSS 2.0%CVE-2020-3179HIGHCisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service VulnerabilityEPSS 1.9%CVE-2020-11044LOWDouble Free in FreeRDPEPSS 1.9%CVE-2023-27537A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without EPSS 1.9%CVE-2022-44640CRITICALHeimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key DistribEPSS 1.8%CVE-2020-11017MEDIUMDouble free in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.8%CVE-2025-21201HIGHWindows Telephony Server Remote Code Execution VulnerabilityEPSS 1.8%