CWE-416 · Use After Free (page 23)
Page 23 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-53730 | High | 7.8 | 2025-08-12 | Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. |
CVE-2025-53721 | High | 7.0 | 2025-08-12 | Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-53718 | High | 7.0 | 2025-08-12 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-53152 | High | 7.8 | 2025-08-12 | Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. |
CVE-2025-53151 | High | 7.8 | 2025-08-12 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-53147 | High | 7.0 | 2025-08-12 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-53142 | High | 7.0 | 2025-08-12 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-53140 | High | 7.0 | 2025-08-12 | Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
CVE-2025-53137 | High | 7.0 | 2025-08-12 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-53133 | High | 7.8 | 2025-08-12 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-53132 | High | 7.8 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p… |
CVE-2025-50177 | High | 8.1 | 2025-08-12 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2025-50167 | High | 7.0 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privile… |
CVE-2025-50159 | High | 7.3 | 2025-08-12 | Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally. |
CVE-2025-50153 | High | 7.8 | 2025-08-12 | Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally. |
CVE-2025-49761 | High | 7.8 | 2025-08-12 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-49743 | Medium | 6.7 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
CVE-2025-49568 | Medium | 5.5 | 2025-08-12 | Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation… |
CVE-2025-38500 | High | 7.8 | 2025-08-12 | In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md p… |
CVE-2025-55157 | High | 8.8 | 2025-08-11 | Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during eva… |
CVE-2025-8842 | Medium | 5.3 | 2025-08-11 | A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation le… |
CVE-2025-8837 | Medium | 5.3 | 2025-08-11 | A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000… |
CVE-2025-27128 | High | 8.4 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free. |
CVE-2025-24298 | High | 8.4 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free. |
CVE-2025-46709 | High | 7.5 | 2025-08-09 | Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception. |
CVE-2025-8578 | High | 8.8 | 2025-08-07 | Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2025-8576 | High | 8.8 | 2025-08-07 | Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
CVE-2025-21474 | High | 7.8 | 2025-08-06 | Memory corruption while processing commands from A2dp sink command queue. |
CVE-2025-21458 | High | 7.8 | 2025-08-06 | Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously. |
CVE-2025-21456 | High | 7.8 | 2025-08-06 | Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently. |
CVE-2025-54635 | Medium | 5.9 | 2025-08-06 | Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availabi… |
CVE-2025-54626 | Medium | 4.4 | 2025-08-06 | Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-0932 | Medium | 4.3 | 2025-08-04 | Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driv… |
CVE-2025-23281 | High | 7.0 | 2025-08-02 | NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to… |
CVE-2025-8292 | High | 8.8 | 2025-07-30 | Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2025-43222 | Critical | 9.8 | 2025-07-30 | A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Vent… |
CVE-2025-43216 | Medium | 6.5 | 2025-07-30 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoi… |
CVE-2025-6636 | High | 7.8 | 2025-07-29 | A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vu… |
CVE-2025-38488 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-500… |
CVE-2025-38485 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush… |
CVE-2025-38476 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in self… |
CVE-2025-38471 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP comp… |
CVE-2025-8176 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tif… |
CVE-2025-38464 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_c… |
CVE-2025-38449 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released… |
CVE-2025-38443 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: bl… |
CVE-2025-38437 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return… |
CVE-2025-38386 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platfo… |
CVE-2025-38378 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_p… |
CVE-2025-38377 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose… |
CVE-2025-38369 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using … |
CVE-2025-4878 | Low | 3.6 | 2025-07-22 | A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be t… |
CVE-2025-47917 | High | 8.9 | 2025-07-20 | Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedt… |
CVE-2025-38350 | High | 7.8 | 2025-07-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdis… |
CVE-2025-38349 | High | 7.8 | 2025-07-18 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points… |
CVE-2025-7657 | High | 8.8 | 2025-07-15 | Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2025-7042 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allo… |
CVE-2025-6973 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow… |
CVE-2025-6972 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability cou… |
CVE-2025-6971 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability cou… |
CVE-2025-3631 | Medium | 6.5 | 2025-07-11 | An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. |
CVE-2025-52946 | High | 7.5 | 2025-07-11 | A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sendi… |
CVE-2025-7425 | High | 7.8 | 2025-07-10 | A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as… |
CVE-2025-38346 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens wit… |
CVE-2025-38323 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in… |
CVE-2025-38289 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a… |
CVE-2025-38259 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gets and enables all… |
CVE-2025-38250 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in… |
CVE-2025-38248 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a… |
CVE-2025-49735 | High | 8.1 | 2025-07-08 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network. |
CVE-2025-49733 | High | 7.8 | 2025-07-08 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2025-49726 | High | 7.8 | 2025-07-08 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
CVE-2025-49725 | High | 7.8 | 2025-07-08 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
CVE-2025-49724 | High | 8.8 | 2025-07-08 | Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-49711 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-49703 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-49700 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-49699 | High | 7.0 | 2025-07-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-49698 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-49695 | High | 8.4 | 2025-07-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-49685 | High | 7.0 | 2025-07-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2025-49682 | High | 7.3 | 2025-07-08 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-49677 | High | 7.0 | 2025-07-08 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-49675 | High | 7.8 | 2025-07-08 | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-49665 | High | 7.8 | 2025-07-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privil… |
CVE-2025-49660 | High | 7.8 | 2025-07-08 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
CVE-2025-48821 | High | 7.1 | 2025-07-08 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network. |
CVE-2025-48806 | High | 7.8 | 2025-07-08 | Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally. |
CVE-2025-48000 | High | 7.8 | 2025-07-08 | Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-47991 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
CVE-2025-47986 | High | 8.8 | 2025-07-08 | Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-47976 | High | 7.8 | 2025-07-08 | Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-27056 | High | 7.8 | 2025-07-08 | Memory corruption during sub-system restart while processing clean-up to free up resources. |
CVE-2025-27050 | High | 7.8 | 2025-07-08 | Memory corruption while processing event close when client process terminates abruptly. |
CVE-2025-27047 | High | 7.8 | 2025-07-08 | Memory corruption while processing the TESTPATTERNCONFIG escape path. |
CVE-2025-21466 | High | 7.8 | 2025-07-08 | Memory corruption while processing a private escape command in an event trigger. |
CVE-2025-38236 | High | 7.8 | 2025-07-08 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i… |
CVE-2025-53185 | Medium | 6.6 | 2025-07-07 | Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploi… |
CVE-2025-38227 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reporte… |
CVE-2025-38212 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after… |