CWE-416 · Use After Free (page 20)
Page 20 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-59243 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-59238 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2025-59236 | High | 8.4 | 2025-10-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-59234 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-59227 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-59226 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. |
CVE-2025-59225 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-59224 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-59223 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-59222 | High | 7.8 | 2025-10-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-59221 | High | 7.0 | 2025-10-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-59210 | High | 7.4 | 2025-10-14 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-59206 | High | 7.4 | 2025-10-14 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-59202 | High | 7.0 | 2025-10-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2025-59196 | High | 7.0 | 2025-10-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr… |
CVE-2025-59195 | High | 7.0 | 2025-10-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to de… |
CVE-2025-59189 | High | 7.4 | 2025-10-14 | Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-58738 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58737 | High | 7.0 | 2025-10-14 | Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. |
CVE-2025-58736 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58735 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58734 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58733 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58732 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58731 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58730 | High | 7.0 | 2025-10-14 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
CVE-2025-58728 | High | 7.8 | 2025-10-14 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-58719 | Medium | 4.7 | 2025-10-14 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2025-58718 | High | 8.8 | 2025-10-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2025-55693 | High | 7.4 | 2025-10-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-55691 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55690 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55689 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55688 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55687 | High | 7.4 | 2025-10-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized atta… |
CVE-2025-55686 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55685 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55684 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55678 | High | 7.0 | 2025-10-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2025-55335 | High | 7.4 | 2025-10-14 | Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-55331 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55326 | High | 7.5 | 2025-10-14 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network. |
CVE-2025-53768 | High | 7.8 | 2025-10-14 | Use after free in Xbox allows an authorized attacker to elevate privileges locally. |
CVE-2025-53150 | High | 7.8 | 2025-10-14 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-50175 | High | 7.8 | 2025-10-14 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-50174 | High | 7.0 | 2025-10-14 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
CVE-2025-49708 | Critical | 9.9 | 2025-10-14 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. |
CVE-2025-48004 | High | 7.4 | 2025-10-14 | Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-11719 | Critical | 9.8 | 2025-10-14 | Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption… |
CVE-2025-11708 | Critical | 9.8 | 2025-10-14 | Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. |
CVE-2025-62170 | High | 7.5 | 2025-10-13 | rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions pr… |
CVE-2025-58299 | High | 8.4 | 2025-10-11 | Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58287 | High | 7.8 | 2025-10-11 | Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-52885 | | 2025-10-10 | Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions… | |
CVE-2025-23280 | High | 7.0 | 2025-10-10 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead… |
CVE-2025-61864 | High | 7.8 | 2025-10-10 | A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information… |
CVE-2025-47354 | High | 7.8 | 2025-10-09 | Memory corruption while allocating buffers in DSP service. |
CVE-2025-47342 | High | 7.1 | 2025-10-09 | Transient DOS may occur when multi-profile concurrency arises with QHS enabled. |
CVE-2023-53673 | High | 8.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect… |
CVE-2023-53645 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: bpf: Make bpf_refcount_acquire fallible for non-owning refs This patch fixes an incorrect… |
CVE-2023-53640 | High | 7.3 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN use_after_free out of bounds When we run syzkaller we get belo… |
CVE-2023-53638 | High | 7.0 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: cancel queued works in probe error path If it fails to get the devices's MAC a… |
CVE-2023-53636 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: clk: microchip: fix potential UAF in auxdev release callback Similar to commit 1c11289b34… |
CVE-2023-53629 | Critical | 9.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in… |
CVE-2023-53619 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start(… |
CVE-2022-50552 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switch when reinitializing queues The hctx's run_work may b… |
CVE-2022-50542 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470x_int_in_callback() syzbot reported use-after-f… |
CVE-2025-59734 | | 2025-10-06 | It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2. When a STOR chunk is present, a subse… | |
CVE-2023-53613 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test of remo… |
CVE-2023-53608 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() The finalizat… |
CVE-2023-53587 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buf… |
CVE-2023-53572 | High | 7.0 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use _safe list iterator to avoid a use after free This loop is freeing "cl… |
CVE-2023-53560 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to hist_vars if they have referenced variables Hist tr… |
CVE-2023-53559 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to… |
CVE-2023-53556 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vector… |
CVE-2023-53552 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i91… |
CVE-2023-53544 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: davinci: Fix clk use after free The remove function first frees the clks and onl… |
CVE-2023-53537 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free for cached IPU bio xfstest generic/019 reports a bug: … |
CVE-2023-53536 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blk_crypto_evict_key() more robust If blk_crypto_evict_key() sees that t… |
CVE-2022-50507 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate data run offset This adds sanity checks for data run offset. We should… |
CVE-2022-50496 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy() Dm_cache also has the same UAF problem when dm_resume() an… |
CVE-2022-50492 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tea… |
CVE-2022-50488 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible uaf for 'bfqq->bic' Our test report a uaf for 'bfqq->bic' in 5.1… |
CVE-2025-39951 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: um: virtio_uml: Fix use-after-free after put_device in probe When register_virtio_device(… |
CVE-2025-39945 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnic_delete_task The original code uses cancel_delayed_w… |
CVE-2025-39944 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on c… |
CVE-2025-49844 | Critical | 9.9 | 2025-10-03 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script t… |
CVE-2025-10729 | | 2025-10-03 | The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading t… | |
CVE-2025-11234 | High | 7.5 | 2025-10-03 | A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callb… |
CVE-2025-61692 | High | 7.8 | 2025-10-02 | VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the a… |
CVE-2025-46205 | High | 8.1 | 2025-10-01 | A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplyin… |
CVE-2023-53515 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it h… |
CVE-2023-53504 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should… |
CVE-2023-53500 | High | 7.3 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc… |
CVE-2023-53494 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value o… |
CVE-2023-53484 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affin… |
CVE-2023-53479 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-aft… |
CVE-2023-53459 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in delayed work If the device is plugged/unplugged without giv… |
CVE-2023-53454 | High | 8.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput input_dev name Reference the… |
CVE-2022-50454 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() nouveau_bo_init(… |