CWE-416 · Use After Free (page 26)
Page 26 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-37765 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix ttm_bo_delayed_delete oops Fix an oops in ttm_bo_delayed_delete w… |
CVE-2025-37763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a… |
CVE-2025-37750 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: cli… |
CVE-2025-37738 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore… |
CVE-2025-23142 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-use… |
CVE-2025-30194 | High | 7.5 | 2025-04-29 | When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illeg… |
CVE-2025-31197 | Medium | 5.7 | 2025-04-29 | The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve… |
CVE-2025-24252 | High | 8.8 | 2025-04-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS… |
CVE-2025-1048 | High | 8.8 | 2025-04-23 | Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary cod… |
CVE-2025-1046 | High | 7.8 | 2025-04-23 | Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2025-37838 | High | 7.8 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Con… |
CVE-2021-47670 | High | 8.8 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferen… |
CVE-2021-47669 | High | 7.8 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferenc… |
CVE-2021-47668 | High | 8.8 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferenci… |
CVE-2025-1290 | High | 8.1 | 2025-04-17 | A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and… |
CVE-2025-1704 | Medium | 6.5 | 2025-04-16 | ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices… |
CVE-2025-3620 | High | 8.8 | 2025-04-16 | Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2025-22126 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md… |
CVE-2025-22097 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization f… |
CVE-2025-22088 | Critical | 9.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_… |
CVE-2025-22085 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-fr… |
CVE-2025-22083 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_e… |
CVE-2025-22068 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depends on `ub… |
CVE-2025-22041 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue… |
CVE-2025-22040 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition be… |
CVE-2025-22036 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer… |
CVE-2025-22035 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function_flags during tracer switching Kairui… |
CVE-2025-22024 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix management of listener transports Currently, when no active threads are running… |
CVE-2024-58093 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f… |
CVE-2025-22023 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 ("usb: xhc… |
CVE-2025-22020 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the f… |
CVE-2023-42970 | High | 8.8 | 2025-04-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari… |
CVE-2025-3416 | Low | 3.7 | 2025-04-08 | A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may res… |
CVE-2025-29824 | High | 7.8 | 2025-04-08 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-29823 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29820 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-29792 | High | 7.3 | 2025-04-08 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
CVE-2025-27751 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-27750 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-27749 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27748 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27746 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27745 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27730 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-27729 | High | 7.8 | 2025-04-08 | Use after free in Windows Shell allows an unauthorized attacker to execute code locally. |
CVE-2025-27492 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-27491 | High | 7.1 | 2025-04-08 | Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network. |
CVE-2025-27480 | High | 8.1 | 2025-04-08 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-27476 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-27467 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-27200 | High | 7.8 | 2025-04-08 | Animate versions 24.0.7, 23.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2025-26687 | High | 7.5 | 2025-04-08 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-26681 | Medium | 6.7 | 2025-04-08 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2025-26679 | High | 7.8 | 2025-04-08 | Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-26671 | High | 8.1 | 2025-04-08 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-26670 | High | 8.1 | 2025-04-08 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2025-26663 | High | 8.1 | 2025-04-08 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2025-26649 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-26648 | High | 7.8 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-26640 | High | 7.0 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-31498 | | 2025-04-08 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a quer… | |
CVE-2025-21437 | High | 7.8 | 2025-04-07 | Memory corruption while processing memory map or unmap IOCTL operations simultaneously. |
CVE-2025-21436 | High | 7.8 | 2025-04-07 | Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. |
CVE-2024-49848 | Medium | 6.7 | 2025-04-07 | Memory corruption while processing multiple IOCTL calls from HLOS to DSP. |
CVE-2024-45544 | Medium | 6.6 | 2025-04-07 | Memory corruption while processing IOCTL calls to add route entry in the HW. |
CVE-2024-45540 | Medium | 6.6 | 2025-04-07 | Memory corruption while invoking IOCTL map buffer request from userspace. |
CVE-2024-43066 | High | 7.8 | 2025-04-07 | Memory corruption while handling file descriptor during listener registration/de-registration. |
CVE-2024-11235 | High | 8.1 | 2025-04-04 | In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-fre… |
CVE-2025-29815 | High | 7.6 | 2025-04-04 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2025-31115 | | 2025-04-03 | XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma… | |
CVE-2025-22004 | High | 8.6 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the l… |
CVE-2025-21999 | High | 7.8 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiat… |
CVE-2025-3066 | High | 8.8 | 2025-04-02 | Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2025-21979 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from th… |
CVE-2025-21969 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync comma… |
CVE-2025-21968 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcp_work [Why] A slab-use-after-free is repo… |
CVE-2025-21967 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could b… |
CVE-2025-21945 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock->zero_len has value, ->llist of smb_lo… |
CVE-2025-21934 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rio_add_net() fails rio_add_net() calls device_register()… |
CVE-2025-21929 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() During the `rmmod`… |
CVE-2025-21928 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experie… |
CVE-2025-21923 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-steam: Fix use-after-free when detaching device When a hid-steam device is remov… |
CVE-2025-21915 | High | 7.0 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driver_override_show() Fixed a possible UAF problem in dri… |
CVE-2025-21896 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: fuse: revert back to __readahead_folio() for readahead In commit 3eab9d7bc2f4 ("fuse: con… |
CVE-2025-3030 | High | 8.1 | 2025-04-01 | Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption a… |
CVE-2025-3028 | Medium | 6.5 | 2025-04-01 | JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firef… |
CVE-2025-30427 | Medium | 4.3 | 2025-03-31 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoi… |
CVE-2025-21893 | High | 7.8 | 2025-03-31 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference count has been reduced to 0, the garbag… |
CVE-2025-2913 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FL__blk_gc_list of the file src/H5FL.c… |
CVE-2025-30232 | High | 8.1 | 2025-03-28 | A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges. |
CVE-2023-53023 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fix a use-after-free that occurs in kfree… |
CVE-2023-53021 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free syzbot reported a nasty crash [1] in n… |
CVE-2023-53016 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change syzbot reports a possible dead… |
CVE-2023-53003 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The memory for l… |
CVE-2023-52999 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: fix UaF in netns ops registration error path If net_assign_generic() fails, the curr… |
CVE-2023-52983 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bic_set_bfqq() After commit 64dc8c732f5c ("block, bfq: fi… |
CVE-2023-52975 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug report and… |
CVE-2023-52974 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_… |
CVE-2023-52973 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF After a call to… |
CVE-2023-52935 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, collapse_and_… |