CWE-416 · Use After Free (page 27)
Page 27 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-55678 | High | 7.0 | 2025-10-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2025-55335 | High | 7.4 | 2025-10-14 | Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-55331 | High | 7.0 | 2025-10-14 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
CVE-2025-55326 | High | 7.5 | 2025-10-14 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network. |
CVE-2025-53768 | High | 7.8 | 2025-10-14 | Use after free in Xbox allows an authorized attacker to elevate privileges locally. |
CVE-2025-53150 | High | 7.8 | 2025-10-14 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-50175 | High | 7.8 | 2025-10-14 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-50174 | High | 7.0 | 2025-10-14 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
CVE-2025-49708 | Critical | 9.9 | 2025-10-14 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. |
CVE-2025-48004 | High | 7.4 | 2025-10-14 | Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-11719 | Critical | 9.8 | 2025-10-14 | Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption… |
CVE-2025-11708 | Critical | 9.8 | 2025-10-14 | Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. |
CVE-2025-62170 | High | 7.5 | 2025-10-13 | rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions pr… |
CVE-2025-58299 | High | 8.4 | 2025-10-11 | Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58287 | High | 7.8 | 2025-10-11 | Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-52885 | | 2025-10-10 | Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions… | |
CVE-2025-23280 | High | 7.0 | 2025-10-10 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead… |
CVE-2025-61864 | High | 7.8 | 2025-10-10 | A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information… |
CVE-2025-47354 | High | 7.8 | 2025-10-09 | Memory corruption while allocating buffers in DSP service. |
CVE-2025-47342 | High | 7.1 | 2025-10-09 | Transient DOS may occur when multi-profile concurrency arises with QHS enabled. |
CVE-2023-53673 | High | 8.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect… |
CVE-2023-53645 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: bpf: Make bpf_refcount_acquire fallible for non-owning refs This patch fixes an incorrect… |
CVE-2023-53640 | High | 7.3 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN use_after_free out of bounds When we run syzkaller we get belo… |
CVE-2023-53638 | High | 7.0 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: cancel queued works in probe error path If it fails to get the devices's MAC a… |
CVE-2023-53636 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: clk: microchip: fix potential UAF in auxdev release callback Similar to commit 1c11289b34… |
CVE-2023-53629 | Critical | 9.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in… |
CVE-2023-53619 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start(… |
CVE-2022-50552 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switch when reinitializing queues The hctx's run_work may b… |
CVE-2022-50542 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470x_int_in_callback() syzbot reported use-after-f… |
CVE-2025-59734 | | 2025-10-06 | It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2. When a STOR chunk is present, a subse… | |
CVE-2023-53613 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test of remo… |
CVE-2023-53608 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() The finalizat… |
CVE-2023-53587 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buf… |
CVE-2023-53572 | High | 7.0 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use _safe list iterator to avoid a use after free This loop is freeing "cl… |
CVE-2023-53560 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to hist_vars if they have referenced variables Hist tr… |
CVE-2023-53559 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to… |
CVE-2023-53556 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vector… |
CVE-2023-53552 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i91… |
CVE-2023-53544 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: davinci: Fix clk use after free The remove function first frees the clks and onl… |
CVE-2023-53537 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free for cached IPU bio xfstest generic/019 reports a bug: … |
CVE-2023-53536 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blk_crypto_evict_key() more robust If blk_crypto_evict_key() sees that t… |
CVE-2022-50507 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate data run offset This adds sanity checks for data run offset. We should… |
CVE-2022-50496 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy() Dm_cache also has the same UAF problem when dm_resume() an… |
CVE-2022-50492 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tea… |
CVE-2022-50488 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible uaf for 'bfqq->bic' Our test report a uaf for 'bfqq->bic' in 5.1… |
CVE-2025-39951 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: um: virtio_uml: Fix use-after-free after put_device in probe When register_virtio_device(… |
CVE-2025-39945 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnic_delete_task The original code uses cancel_delayed_w… |
CVE-2025-39944 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on c… |
CVE-2025-49844 | Critical | 9.9 | 2025-10-03 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script t… |
CVE-2025-10729 | | 2025-10-03 | The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading t… | |
CVE-2025-11234 | High | 7.5 | 2025-10-03 | A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callb… |
CVE-2025-61692 | High | 7.8 | 2025-10-02 | VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the a… |
CVE-2025-46205 | High | 8.1 | 2025-10-01 | A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplyin… |
CVE-2023-53515 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it h… |
CVE-2023-53504 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should… |
CVE-2023-53500 | High | 7.3 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc… |
CVE-2023-53494 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value o… |
CVE-2023-53484 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affin… |
CVE-2023-53479 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-aft… |
CVE-2023-53459 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in delayed work If the device is plugged/unplugged without giv… |
CVE-2023-53454 | High | 8.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput input_dev name Reference the… |
CVE-2022-50454 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() nouveau_bo_init(… |
CVE-2022-50433 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN… |
CVE-2022-50432 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: kernfs: fix use-after-free in __kernfs_remove Syzkaller managed to trigger concurrent cal… |
CVE-2022-50423 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() There is an use-after-f… |
CVE-2022-50422 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() When executing SMP task fai… |
CVE-2022-50421 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsg_dev_remove() in rpmsg_cor… |
CVE-2025-39896 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery work from being queued during device removal Use disable_wor… |
CVE-2025-10994 | Medium | 5.3 | 2025-09-26 | A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipul… |
CVE-2025-10501 | High | 8.8 | 2025-09-24 | Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2025-10500 | High | 8.8 | 2025-09-24 | Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2025-47327 | High | 7.8 | 2025-09-24 | Memory corruption while encoding the image data. |
CVE-2025-47315 | High | 7.8 | 2025-09-24 | Memory corruption while handling repeated memory unmap requests from guest VM. |
CVE-2025-27077 | High | 7.8 | 2025-09-24 | Memory corruption while processing message in guest VM. |
CVE-2025-27037 | High | 7.8 | 2025-09-24 | Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers. |
CVE-2025-8410 | High | 7.4 | 2025-09-23 | Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.5.0 befor… |
CVE-2025-39882 | High | 8.4 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free The for_each_child_of_node() helper dr… |
CVE-2025-39881 | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerabilit… |
CVE-2025-39877 | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx… |
CVE-2025-39873 | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB can_put_echo_s… |
CVE-2025-39871 | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call to idxd_free() introduces a duplicate… |
CVE-2025-10824 | Medium | 5.3 | 2025-09-23 | A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use a… |
CVE-2025-25177 | Medium | 5.1 | 2025-09-22 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2025-39866 | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurre… |
CVE-2025-39864 | High | 8.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in… |
CVE-2025-39863 | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work The brcmf_btc… |
CVE-2025-39861 | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: vhci: Prevent use-after-free by removing debugfs files early Move the creation… |
CVE-2025-39860 | High | 8.0 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat be… |
CVE-2025-39859 | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog The ptp_ocp_detach() only s… |
CVE-2025-39855 | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ptp_ts_irq The E810 device has support for a "l… |
CVE-2025-39854 | High | 7.8 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL access of tx->in_use in ice_ll_ts_intr Recent versions of the E810 firmware… |
CVE-2025-59220 | High | 7.0 | 2025-09-18 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to eleva… |
CVE-2025-59216 | High | 7.0 | 2025-09-18 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
CVE-2025-59215 | High | 7.0 | 2025-09-18 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2023-53446 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free Struct pcie_link_s… |
CVE-2023-53432 | High | 8.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: firewire: net: fix use after free in fwnet_finish_incoming_packet() The netif_rx() functi… |
CVE-2023-53427 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR reco… |
CVE-2023-53426 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xsk_diag use-after-free error during socket cleanup Fix a use-after-free error t… |
CVE-2022-50417 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix GEM handle creation ref-counting panfrost_gem_create_with_handle() prev… |
CVE-2022-50413 | High | 8.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free We've already freed the assoc_data at this point, so n… |