Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2018-4990
High · 8.8
KEV High · 56 CWE-415 Jul 9, 2018
Adobe Acrobat and Reader Double Free Vulnerability
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2015-1239
Medium · 6.5
CWE-415 Oct 18, 2017
Double Free in Google Chrome
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.
CVE-2014-0502
High · 8.8
KEV High · 59 CWE-415 Feb 21, 2014
Adobe Flash Player Double Free Vulnerablity
Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.
CVE-2006-5051
High · 8.1
CWE-415 Sep 27, 2006
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.