CWE-416 · Use After Free (page 23)

Page 23 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.

All CVEs classified under CWE-416 — newest first (page 23 of 82)
CVESeverityScorePublishedSummary
CVE-2025-53730High7.82025-08-12Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-53721High7.02025-08-12Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53718High7.02025-08-12Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53152High7.82025-08-12Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.
CVE-2025-53151High7.82025-08-12Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-53147High7.02025-08-12Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53142High7.02025-08-12Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-53140High7.02025-08-12Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-53137High7.02025-08-12Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-53133High7.82025-08-12Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-53132High7.82025-08-12Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p…
CVE-2025-50177High8.12025-08-12Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2025-50167High7.02025-08-12Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privile…
CVE-2025-50159High7.32025-08-12Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.
CVE-2025-50153High7.82025-08-12Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-49761High7.82025-08-12Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-49743Medium6.72025-08-12Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el…
CVE-2025-49568Medium5.52025-08-12Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation…
CVE-2025-38500High7.82025-08-12In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md p…
CVE-2025-55157High8.82025-08-11Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during eva…
CVE-2025-8842Medium5.32025-08-11A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation le…
CVE-2025-8837Medium5.32025-08-11A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000…
CVE-2025-27128High8.42025-08-11in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.
CVE-2025-24298High8.42025-08-11in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.
CVE-2025-46709High7.52025-08-09Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.
CVE-2025-8578High8.82025-08-07Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…
CVE-2025-8576High8.82025-08-07Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte…
CVE-2025-21474High7.82025-08-06Memory corruption while processing commands from A2dp sink command queue.
CVE-2025-21458High7.82025-08-06Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
CVE-2025-21456High7.82025-08-06Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
CVE-2025-54635Medium5.92025-08-06Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availabi…
CVE-2025-54626Medium4.42025-08-06Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability.
CVE-2025-0932Medium4.32025-08-04Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driv…
CVE-2025-23281High7.02025-08-02NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to…
CVE-2025-8292High8.82025-07-30Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…
CVE-2025-43222Critical9.82025-07-30A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Vent…
CVE-2025-43216Medium6.52025-07-30A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoi…
CVE-2025-6636High7.82025-07-29A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vu…
CVE-2025-38488Critical9.82025-07-28In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-500…
CVE-2025-38485High7.82025-07-28In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush…
CVE-2025-38476Critical9.82025-07-28In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in self…
CVE-2025-38471Critical9.82025-07-28In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP comp…
CVE-2025-8176Medium5.32025-07-26A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tif…
CVE-2025-38464High7.82025-07-25In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_c…
CVE-2025-38449High7.82025-07-25In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released…
CVE-2025-38443High7.82025-07-25In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: bl…
CVE-2025-38437High8.82025-07-25In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return…
CVE-2025-38386High7.82025-07-25In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platfo…
CVE-2025-38378High7.82025-07-25In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_p…
CVE-2025-38377High8.82025-07-25In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose…
CVE-2025-38369High7.82025-07-25In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using …
CVE-2025-4878Low3.62025-07-22A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be t…
CVE-2025-47917High8.92025-07-20Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedt…
CVE-2025-38350High7.82025-07-19In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdis…
CVE-2025-38349High7.82025-07-18In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points…
CVE-2025-7657High8.82025-07-15Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…
CVE-2025-7042High7.82025-07-15Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allo…
CVE-2025-6973High7.82025-07-15Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow…
CVE-2025-6972High7.82025-07-15Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability cou…
CVE-2025-6971High7.82025-07-15Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability cou…
CVE-2025-3631Medium6.52025-07-11An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.
CVE-2025-52946High7.52025-07-11A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sendi…
CVE-2025-7425High7.82025-07-10A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as…
CVE-2025-38346High7.82025-07-10In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens wit…
CVE-2025-38323High7.82025-07-10In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in…
CVE-2025-38289High7.82025-07-10In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a…
CVE-2025-38259High7.82025-07-09In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gets and enables all…
CVE-2025-38250High7.82025-07-09In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in…
CVE-2025-38248High7.82025-07-09In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a…
CVE-2025-49735High8.12025-07-08Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
CVE-2025-49733High7.82025-07-08Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-49726High7.82025-07-08Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVE-2025-49725High7.82025-07-08Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVE-2025-49724High8.82025-07-08Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.
CVE-2025-49711High7.82025-07-08Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-49703High7.82025-07-08Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49700High7.82025-07-08Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49699High7.02025-07-08Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49698High7.82025-07-08Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49695High8.42025-07-08Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49685High7.02025-07-08Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49682High7.32025-07-08Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2025-49677High7.02025-07-08Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-49675High7.82025-07-08Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-49665High7.82025-07-08Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privil…
CVE-2025-49660High7.82025-07-08Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVE-2025-48821High7.12025-07-08Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2025-48806High7.82025-07-08Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.
CVE-2025-48000High7.82025-07-08Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2025-47991High7.82025-07-08Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVE-2025-47986High8.82025-07-08Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
CVE-2025-47976High7.82025-07-08Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
CVE-2025-27056High7.82025-07-08Memory corruption during sub-system restart while processing clean-up to free up resources.
CVE-2025-27050High7.82025-07-08Memory corruption while processing event close when client process terminates abruptly.
CVE-2025-27047High7.82025-07-08Memory corruption while processing the TESTPATTERNCONFIG escape path.
CVE-2025-21466High7.82025-07-08Memory corruption while processing a private escape command in an event trigger.
CVE-2025-38236High7.82025-07-08In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i…
CVE-2025-53185Medium6.62025-07-07Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploi…
CVE-2025-38227High7.82025-07-04In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reporte…
CVE-2025-38212High7.82025-07-04In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after…