CWE-416 · Use After Free (page 18)
Page 18 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1144 | Medium | 6.3 | 2026-01-19 | A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. Th… |
CVE-2025-15538 | Medium | 5.3 | 2026-01-18 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter… |
CVE-2026-21921 | Medium | 6.5 | 2026-01-15 | A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated… |
CVE-2026-21908 | High | 7.1 | 2026-01-15 | A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow a… |
CVE-2025-13845 | High | 7.8 | 2026-01-15 | CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody. |
CVE-2026-22857 | Critical | 9.8 | 2026-01-14 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by i… |
CVE-2026-22856 | High | 8.1 | 2026-01-14 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free… |
CVE-2026-22851 | Medium | 5.9 | 2026-01-14 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SD… |
CVE-2025-70968 | Critical | 9.8 | 2026-01-14 | FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). |
CVE-2025-71110 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in defer_free() before accessing freed memory When CONFIG_SLUB_T… |
CVE-2026-21287 | High | 7.8 | 2026-01-13 | Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2026-21221 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-21219 | High | 7.0 | 2026-01-13 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2026-20953 | High | 8.4 | 2026-01-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-20952 | High | 8.4 | 2026-01-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-20950 | High | 7.8 | 2026-01-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-20924 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20923 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20920 | High | 7.8 | 2026-01-13 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2026-20918 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20877 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20874 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20873 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20871 | High | 7.8 | 2026-01-13 | Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-20870 | High | 7.8 | 2026-01-13 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2026-20867 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20865 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20861 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20859 | High | 7.8 | 2026-01-13 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-20858 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20854 | High | 7.5 | 2026-01-13 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network. |
CVE-2026-20844 | High | 7.4 | 2026-01-13 | Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-20842 | High | 7.0 | 2026-01-13 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2026-20830 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20822 | High | 7.8 | 2026-01-13 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2025-10865 | High | 7.8 | 2026-01-13 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use… |
CVE-2025-58411 | High | 8.8 | 2026-01-13 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a pot… |
CVE-2025-71099 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() In xe_oa_add_config_ioctl(), we… |
CVE-2025-71075 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fa… |
CVE-2025-71073 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() schedules lk-… |
CVE-2025-71071 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the reference… |
CVE-2025-68817 | Critical | 9.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurre… |
CVE-2026-0885 | Medium | 6.5 | 2026-01-13 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2026-0884 | Critical | 9.8 | 2026-01-13 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2026-0882 | High | 8.8 | 2026-01-13 | Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2025-68656 | Medium | 6.8 | 2026-01-12 | Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, usb_class_request_get_descriptor() frees and reall… |
CVE-2026-20971 | High | 7.8 | 2026-01-09 | Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code. |
CVE-2026-20968 | Medium | 6.7 | 2026-01-09 | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2025-47339 | High | 7.8 | 2026-01-07 | Memory corruption while deinitializing a HDCP session. |
CVE-2025-47337 | Medium | 6.7 | 2026-01-07 | Memory corruption while accessing a synchronization object during concurrent operations. |
CVE-2025-47336 | Medium | 6.7 | 2026-01-07 | Memory corruption while performing sensor register read operations. |
CVE-2025-47333 | Medium | 6.6 | 2026-01-07 | Memory corruption while handling buffer mapping operations in the cryptographic driver. |
CVE-2026-21486 | High | 7.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below contain Use After Free, Heap-based Buff… |
CVE-2026-21675 | Critical | 9.8 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in… |
CVE-2025-20806 | Medium | 6.7 | 2026-01-06 | In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained… |
CVE-2025-20805 | Medium | 6.7 | 2026-01-06 | In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained… |
CVE-2025-20804 | Medium | 6.7 | 2026-01-06 | In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained… |
CVE-2025-20802 | Medium | 6.7 | 2026-01-06 | In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already ob… |
CVE-2025-20799 | High | 7.8 | 2026-01-06 | In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine… |
CVE-2025-20787 | Medium | 6.7 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20786 | Medium | 6.7 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20785 | Medium | 6.7 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20781 | High | 7.8 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20780 | High | 7.8 | 2026-01-06 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2025-20779 | High | 7.0 | 2026-01-06 | In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2025-48769 | High | 8.1 | 2026-01-01 | Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single buffer use by two d… |
CVE-2025-66023 | Medium | 4.9 | 2026-01-01 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Versions prior to 0.24.5 have a Heap-Use-After-Free (UAF) vulnerability within the MQTT b… |
CVE-2025-15280 | High | 8.8 | 2025-12-31 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2025-15269 | High | 8.8 | 2025-12-31 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2023-54207 | High | 7.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput input_dev name Reference the HID… |
CVE-2025-59946 | High | 7.5 | 2025-12-27 | NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could resu… |
CVE-2025-68617 | High | 7.0 | 2025-12-23 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS f… |
CVE-2025-14424 | High | 7.8 | 2025-12-23 | GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
CVE-2025-66495 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a P… |
CVE-2025-66494 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows. A PDF object managed by multi… |
CVE-2025-66493 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and 13.2.1 on Windows . When… |
CVE-2025-64468 | High | 7.8 | 2025-12-18 | There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclo… |
CVE-2025-14860 | Critical | 9.8 | 2025-12-18 | Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1. |
CVE-2025-47350 | High | 7.8 | 2025-12-18 | Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application. |
CVE-2025-47322 | High | 7.8 | 2025-12-18 | Memory corruption while handling IOCTL calls to set mode. |
CVE-2025-27063 | High | 7.8 | 2025-12-18 | Memory corruption during video playback when video session open fails with time out error. |
CVE-2025-43536 | Medium | 4.3 | 2025-12-17 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26… |
CVE-2025-43529 | High | 8.8 | 2025-12-17 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26… |
CVE-2025-14765 | High | 8.8 | 2025-12-16 | Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2025-43511 | Medium | 6.5 | 2025-12-12 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26… |
CVE-2025-14372 | Medium | 6.1 | 2025-12-12 | Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
CVE-2025-14569 | Medium | 5.3 | 2025-12-12 | A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp… |
CVE-2025-66585 | High | 7.8 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .c… |
CVE-2025-36934 | High | 7.4 | 2025-12-11 | In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escal… |
CVE-2025-36922 | Medium | 6.7 | 2025-12-11 | In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Ke… |
CVE-2025-55309 | Medium | 6.7 | 2025-12-11 | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an… |
CVE-2025-55308 | Medium | 6.7 | 2025-12-11 | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while… |
CVE-2025-62573 | High | 7.0 | 2025-12-09 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2025-62569 | High | 7.0 | 2025-12-09 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-62565 | High | 7.3 | 2025-12-09 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2025-62563 | High | 7.8 | 2025-12-09 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-62562 | High | 7.8 | 2025-12-09 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. |
CVE-2025-62559 | High | 7.8 | 2025-12-09 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-62558 | High | 7.8 | 2025-12-09 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-62557 | High | 8.4 | 2025-12-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |