CWE-416 · Use After Free (page 24)
Page 24 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38227 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reporte… |
CVE-2025-38212 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after… |
CVE-2025-38211 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac3… |
CVE-2025-38209 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue config fails Commit 104d0e2f6222 ("nvme-… |
CVE-2025-38187 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() The RPC container is released af… |
CVE-2025-38180 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev… |
CVE-2025-38176 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binderfs 16 --t… |
CVE-2025-38175 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: binder: fix yet another UAF in binder_devices Commit e77aff5528a18 ("binderfs: fix use-af… |
CVE-2025-38172 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primar… |
CVE-2025-38154 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not lock… |
CVE-2025-38141 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was… |
CVE-2025-38137 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger u… |
CVE-2025-38131 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active… |
CVE-2025-38129 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_… |
CVE-2025-38118 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_… |
CVE-2025-38117 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex to protect… |
CVE-2025-38116 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_hw_group_as… |
CVE-2025-38109 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual fu… |
CVE-2025-38106 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: B… |
CVE-2025-52886 | Medium | 5.9 | 2025-07-02 | Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is po… |
CVE-2025-38087 | High | 7.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_notifier()… |
CVE-2025-0634 | Critical | 9.8 | 2025-06-30 | Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. |
CVE-2025-6856 | Low | 3.3 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipula… |
CVE-2025-6706 | Medium | 5.0 | 2025-06-26 | An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have author… |
CVE-2025-6661 | High | 7.8 | 2025-06-25 | PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2025-6646 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2025-6645 | High | 7.8 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2025-6644 | High | 7.8 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2025-6640 | High | 7.8 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2025-6555 | Medium | 5.4 | 2025-06-24 | Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2025-6424 | Critical | 9.8 | 2025-06-24 | A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.1… |
CVE-2025-48945 | | 2025-06-20 | pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior t… | |
CVE-2025-6275 | Low | 3.3 | 2025-06-19 | A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been declared as problematic. Affected by this vulnerability is the function GetFuncOffset o… |
CVE-2025-49014 | | 2025-06-19 | jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This is… | |
CVE-2025-6192 | High | 8.8 | 2025-06-18 | Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2022-50229 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in snd_ca… |
CVE-2022-50220 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnet_deferred_k… |
CVE-2022-50219 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix KASAN use-after-free Read in compute_effective_progs Syzbot found a Use After Fr… |
CVE-2022-50214 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: coresight: Clear the connection field properly coresight devices track their connections… |
CVE-2022-50213 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow SET_ID to refer to another table When doing lookups fo… |
CVE-2022-50212 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow CHAIN_ID to refer to another table When doing lookups… |
CVE-2022-50192 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra20-slink: fix UAF in tegra_slink_remove() After calling spi_unregister_master()… |
CVE-2022-50190 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix simplification of devm_spi_register_controller This reverts commit 59ebbe40fb51… |
CVE-2022-50179 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb Syzbot reported use-after-free Read in a… |
CVE-2022-50137 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause pr… |
CVE-2022-50129 | High | 7.0 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix a use-after-free Change the LIO port members inside struct srpt_port from… |
CVE-2022-50095 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b… |
CVE-2022-50092 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dm_sm_register_threshold_callback Fault inject on po… |
CVE-2022-50087 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe f… |
CVE-2022-50072 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then w… |
CVE-2022-50067 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() In btrfs_… |
CVE-2022-50064 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Avoid use-after-free on suspend/resume hctx->user_data is set to vq in virtbl… |
CVE-2022-50035 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex If amdgpu_cs_vm_handling returns r… |
CVE-2022-50034 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3 fix use-after-free at workaround 2 BUG: KFENCE: use-after-free read in __list_… |
CVE-2022-50022 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" d… |
CVE-2022-50021 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ext4: block range must be validated before use in ext4_mb_clear_bb() Block range to free… |
CVE-2022-50005 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout When the pn532 uart devic… |
CVE-2022-50000 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow ta… |
CVE-2022-49995 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdi_unregis… |
CVE-2022-49980 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usb_udc_uevent() The syzbot fuzzer found a race b… |
CVE-2022-49968 | High | 8.0 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroy_workqueue call There is a possible race condition (use-… |
CVE-2022-49956 | High | 7.0 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs _Read/Write_MACREG callbacks are NULL so the re… |
CVE-2022-49951 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix use-after-free during unregister In the following code within firmwa… |
CVE-2022-49939 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref->proc caused by race condition A transaction of type BINDER_TYPE_W… |
CVE-2022-49935 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later Previously when we added a fence… |
CVE-2022-49934 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211_scan_rx() ieee80211_scan_rx() tries to access scan_r… |
CVE-2025-38076 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: alloc_tag: allocate percpu counters for module tags dynamically When a module gets unload… |
CVE-2025-38056 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hda_generic_machine_select() appends… |
CVE-2025-38052 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-u… |
CVE-2025-38051 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the read… |
CVE-2025-38024 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <TASK> __du… |
CVE-2025-38022 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem Call Trace… |
CVE-2025-38019 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices The driver only… |
CVE-2025-46710 | Medium | 5.7 | 2025-06-16 | Possible kernel exceptions caused by reading and writing kernel heap data after free. |
CVE-2025-6119 | Medium | 5.3 | 2025-06-16 | A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChan… |
CVE-2025-5991 | | 2025-06-11 | There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affect… | |
CVE-2025-5958 | High | 8.8 | 2025-06-11 | Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2025-43577 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43576 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43574 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43573 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43550 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-47957 | High | 8.4 | 2025-06-10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47175 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2025-47170 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47168 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47165 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-47164 | High | 8.4 | 2025-06-10 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-47106 | Medium | 5.5 | 2025-06-10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2025-43589 | High | 7.8 | 2025-06-10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont… |
CVE-2025-33071 | High | 8.1 | 2025-06-10 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network. |
CVE-2025-32712 | High | 7.8 | 2025-06-10 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2025-32710 | High | 8.1 | 2025-06-10 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-38000 | High | 7.8 | 2025-06-06 | In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the fi… |
CVE-2025-5644 | Low | 2.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr… |
CVE-2025-23106 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation. |
CVE-2025-23101 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile processor leads to privilege escalation. |
CVE-2025-23098 | High | 7.8 | 2025-06-03 | An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in the mobile processor leads to privilege… |
CVE-2025-27038 | High | 7.5 | 2025-06-03 | Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. |
CVE-2025-27031 | High | 7.8 | 2025-06-03 | memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed. |