CVE Database

Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Double free in Windows Hello allows an authorized attacker to elevate privileges locally.

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7.

A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifically the pcscf_save_pending/save_pending path and security-agreement parsing in sec_agree.c:parse_sec_agree()

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.