CWE-416 · Use After Free (page 10)
Page 10 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-64080 | Critical | 9.3 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification handlers curr… |
CVE-2026-64075 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU grace period Commit 4346ba1604093 ("fprob… |
CVE-2026-64073 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT On PREEMPT_RT, non-HARD i… |
CVE-2026-64071 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_… |
CVE-2026-64061 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_read_gaps() to release… |
CVE-2026-64051 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range during mmap The call to remap_pfn_range… |
CVE-2026-64050 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result… |
CVE-2026-64008 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in create_bo rocket_ioctl_create_bo() inser… |
CVE-2026-64001 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a n… |
CVE-2026-63993 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_… |
CVE-2026-63975 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dcid is received for an a… |
CVE-2026-63970 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio_transport_send_pkt_info() allo… |
CVE-2026-63804 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), called as an RCU callback… |
CVE-2026-63803 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP control protocol (LCP/… |
CVE-2026-63802 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are re… |
CVE-2026-63801 | High | 8.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_aead_decrypt() goes str… |
CVE-2026-63800 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branc… |
CVE-2026-63797 | High | 8.4 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores the newly… |
CVE-2026-63795 | Critical | 10.0 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called w… |
CVE-2026-63793 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost… |
CVE-2026-53401 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with O… |
CVE-2026-53389 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_delete_key(), the del_a… |
CVE-2026-53388 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the… |
CVE-2026-53384 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() reg… |
CVE-2026-53381 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can Oops if th… |
CVE-2026-58598 | High | 7.0 | 2026-07-16 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p… |
CVE-2026-57076 | High | 7.8 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. In the bundled… |
CVE-2026-13713 | Medium | 6.2 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled… |
CVE-2026-55406 | | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView<V> type allow… | |
CVE-2026-6424 | | 2026-07-16 | Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system | |
CVE-2026-38753 | Medium | 4.9 | 2026-07-15 | A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK s… |
CVE-2026-56434 | Medium | 6.5 | 2026-07-15 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side Includes (SSI), prox… |
CVE-2026-61860 | Low | 3.7 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and… |
CVE-2026-15777 | High | 7.5 | 2026-07-14 | Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to pote… |
CVE-2026-15774 | High | 8.3 | 2026-07-14 | Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-15773 | Critical | 9.6 | 2026-07-14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2026-15772 | High | 8.3 | 2026-07-14 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially per… |
CVE-2026-15765 | High | 7.5 | 2026-07-14 | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentiall… |
CVE-2026-15764 | High | 7.5 | 2026-07-14 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to p… |
CVE-2026-58637 | High | 7.0 | 2026-07-14 | Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58634 | High | 7.8 | 2026-07-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-58633 | High | 7.8 | 2026-07-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-58632 | High | 7.8 | 2026-07-14 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-58629 | High | 7.0 | 2026-07-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-58626 | High | 8.8 | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
CVE-2026-58619 | High | 7.0 | 2026-07-14 | Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58613 | High | 7.8 | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58544 | High | 7.0 | 2026-07-14 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-58543 | Medium | 6.3 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
CVE-2026-58537 | High | 7.8 | 2026-07-14 | Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-58536 | High | 7.8 | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58531 | High | 7.5 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges… |
CVE-2026-57093 | High | 7.0 | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-57092 | Critical | 9.9 | 2026-07-14 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. |
CVE-2026-57089 | High | 7.5 | 2026-07-14 | Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network. |
CVE-2026-56649 | Medium | 5.9 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to e… |
CVE-2026-56648 | High | 7.5 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
CVE-2026-56644 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-56643 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-56187 | High | 7.0 | 2026-07-14 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-56183 | High | 7.0 | 2026-07-14 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-56173 | High | 7.0 | 2026-07-14 | Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. |
CVE-2026-55128 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55032 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55018 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-54131 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-54128 | High | 8.4 | 2026-07-14 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. |
CVE-2026-54125 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50689 | High | 7.8 | 2026-07-14 | Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-50688 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50687 | High | 8.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50677 | High | 7.8 | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50676 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50674 | High | 7.0 | 2026-07-14 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50672 | High | 7.0 | 2026-07-14 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50669 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-50666 | High | 8.8 | 2026-07-14 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50505 | High | 7.5 | 2026-07-14 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. |
CVE-2026-50500 | High | 7.5 | 2026-07-14 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50493 | High | 7.8 | 2026-07-14 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50490 | High | 7.0 | 2026-07-14 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-50487 | High | 8.1 | 2026-07-14 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50486 | High | 7.8 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50478 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50476 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-50474 | High | 8.8 | 2026-07-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-50467 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-50466 | High | 7.8 | 2026-07-14 | Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50460 | High | 8.1 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
CVE-2026-50459 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-50458 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50457 | High | 7.8 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50452 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
CVE-2026-50449 | High | 7.0 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50440 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate p… |
CVE-2026-50439 | High | 8.1 | 2026-07-14 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
CVE-2026-50436 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50433 | High | 7.8 | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50432 | Medium | 5.3 | 2026-07-14 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. |
CVE-2026-50427 | High | 7.8 | 2026-07-14 | Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. |