CWE-416 · Use After Free (page 25)
Page 25 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-53015 | Medium | 6.6 | 2025-06-03 | Memory corruption while processing IOCTL command to handle buffers associated with a session. |
CVE-2025-5068 | High | 8.8 | 2025-06-03 | Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2025-23104 | Medium | 6.5 | 2025-06-02 | An issue was discovered in Samsung Mobile Processor Exynos 2200. A Use-After-Free in the mobile processor leads to privilege escalation. |
CVE-2025-5036 | High | 7.8 | 2025-06-02 | A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vuln… |
CVE-2025-0819 | High | 7.8 | 2025-06-02 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2025-0073 | High | 7.8 | 2025-06-02 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2023-26226 | Critical | 9.8 | 2025-05-30 | A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 |
CVE-2025-44906 | High | 7.8 | 2025-05-30 | jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c. |
CVE-2025-5283 | Medium | 5.4 | 2025-05-27 | Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2025-5063 | High | 8.8 | 2025-05-27 | Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2025-48798 | High | 7.3 | 2025-05-27 | A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be… |
CVE-2025-48752 | Low | 2.9 | 2025-05-24 | In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked. |
CVE-2025-5100 | High | 8.0 | 2025-05-23 | A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code… |
CVE-2025-37957 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit ed129ec9057… |
CVE-2025-37952 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destr… |
CVE-2025-37946 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit… |
CVE-2025-37926 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race c… |
CVE-2025-37924 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introd… |
CVE-2025-37916 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error popped up in stress… |
CVE-2025-37903 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies… |
CVE-2025-37899 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use… |
CVE-2025-1706 | High | 7.5 | 2025-05-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2025-37890 | High | 7.8 | 2025-05-16 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described… |
CVE-2025-4516 | | 2025-05-15 | There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an erro… | |
CVE-2025-43571 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43570 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43568 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43549 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-20062 | Medium | 6.1 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20046 | High | 8.0 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20006 | High | 7.4 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-32709 | High | 7.8 | 2025-05-13 | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-32701 | High | 7.8 | 2025-05-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-30400 | High | 7.8 | 2025-05-13 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2025-30393 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-30386 | High | 8.4 | 2025-05-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-30385 | High | 7.8 | 2025-05-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-30377 | High | 8.4 | 2025-05-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-29978 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2025-29977 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29970 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-29841 | High | 7.0 | 2025-05-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker… |
CVE-2025-29831 | High | 7.5 | 2025-05-13 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-31239 | Medium | 4.3 | 2025-05-12 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS… |
CVE-2023-53145 | High | 7.8 | 2025-05-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdi… |
CVE-2025-37885 | High | 8.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back t… |
CVE-2025-37882 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these… |
CVE-2025-37869 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in… |
CVE-2025-37861 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task ma… |
CVE-2025-37854 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to… |
CVE-2025-37849 | High | 8.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to sha… |
CVE-2025-37845 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe… |
CVE-2025-31946 | Medium | 6.2 | 2025-05-08 | Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corru… |
CVE-2025-27578 | High | 7.5 | 2025-05-08 | Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading t… |
CVE-2025-37823 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patc… |
CVE-2025-37819 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m… |
CVE-2025-4372 | High | 8.8 | 2025-05-06 | Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2025-21453 | High | 7.8 | 2025-05-06 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
CVE-2024-45583 | Medium | 6.6 | 2025-05-06 | Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations. |
CVE-2024-45567 | High | 7.8 | 2025-05-06 | Memory corruption while encoding JPEG format. |
CVE-2024-45566 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent buffer access due to modification of the reference count. |
CVE-2024-45564 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent access to server info object due to incorrect reference count update. |
CVE-2024-45562 | Medium | 6.6 | 2025-05-06 | Memory corruption during concurrent access to server info object due to unprotected critical field. |
CVE-2024-45554 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent SSR execution due to race condition on the global maps list. |
CVE-2023-53138 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in… |
CVE-2023-53123 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI func… |
CVE-2023-53116 | Critical | 9.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() oper… |
CVE-2023-53111 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_filebacked() calls blk_mq_complete_request() synch… |
CVE-2023-53107 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: veth: Fix use after free in XDP_REDIRECT Commit 718a18a0c8a6 ("veth: Rework veth_xdp_rcv_… |
CVE-2023-53106 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition This bug influen… |
CVE-2023-53088 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the… |
CVE-2023-53084 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't ow… |
CVE-2023-53082 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix the crash in hot unplug with vp_vdpa While unplugging the vp_vdpa device, it… |
CVE-2023-53075 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec() when index is 0 KASAN reported follow… |
CVE-2023-53072 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token… |
CVE-2023-53052 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix use-after-free bug in refresh_cache_worker() The UAF bug occurred because we we… |
CVE-2023-53039 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notif… |
CVE-2023-53037 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer sup… |
CVE-2025-37797 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-F… |
CVE-2025-1884 | High | 7.8 | 2025-05-02 | Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could a… |
CVE-2025-0427 | High | 7.8 | 2025-05-02 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2025-0072 | High | 7.8 | 2025-05-02 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2025-27365 | Medium | 6.5 | 2025-05-01 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 throug… |
CVE-2022-49921 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in red_enqueue() We can't use "skb" again after passing it… |
CVE-2022-49919 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flow rule object from commit path No need to postpone this… |
CVE-2022-49910 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu Fix the race conditio… |
CVE-2022-49892 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ft… |
CVE-2022-49882 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache Reject kvm_gpc_check… |
CVE-2022-49842 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix use-after-free in snd_soc_exit() KASAN reports a use-after-free: BUG: KA… |
CVE-2022-49840 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() We got a syzkaller proble… |
CVE-2022-49834 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free bug of ns_writer on remount If a nilfs2 filesystem is downgrad… |
CVE-2022-49811 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbd_create_device() The drbd_destroy_connection() frees the "con… |
CVE-2022-49779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case In __unregister_… |
CVE-2022-49770 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fai… |
CVE-2022-49763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about Attribute… |
CVE-2025-37796 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by pri… |
CVE-2025-37786 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it… |
CVE-2025-37778 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and doe… |
CVE-2025-37777 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_c… |
CVE-2025-37776 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_al… |