CWE-416 · Use After Free (page 27)
Page 27 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52931 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vm_xa table makes it vis… |
CVE-2022-49761 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref() Currently we have a btrfs_debug() for… |
CVE-2022-49755 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait While performing fast compositi… |
CVE-2022-49753 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan… |
CVE-2025-21887 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was cau… |
CVE-2025-21883 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling ice_create_… |
CVE-2025-21879 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning root during em shrinking At btrfs_scan_r… |
CVE-2025-21867 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-… |
CVE-2025-2532 | High | 7.8 | 2025-03-25 | Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2025-0835 | High | 7.8 | 2025-03-24 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. |
CVE-2025-2476 | High | 8.8 | 2025-03-19 | Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2023-52927 | High | 7.8 | 2025-03-14 | In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_i… |
CVE-2025-24855 | High | 7.8 | 2025-03-14 | numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is… |
CVE-2024-55549 | High | 7.8 | 2025-03-14 | xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. |
CVE-2025-1432 | High | 7.8 | 2025-03-13 | A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerabili… |
CVE-2025-25568 | Critical | 9.8 | 2025-03-12 | SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes this becaus… |
CVE-2025-21861 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() If mig… |
CVE-2025-21858 | High | 7.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in g… |
CVE-2025-21856 | High | 7.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release() in /driver… |
CVE-2025-21855 | High | 8.6 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushin… |
CVE-2025-2013 | High | 7.8 | 2025-03-11 | Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2025-27181 | High | 7.8 | 2025-03-11 | Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context o… |
CVE-2025-27174 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-27160 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-27159 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-0151 | High | 8.5 | 2025-03-11 | Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. |
CVE-2025-26630 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2025-26629 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-24983 | High | 7.0 | 2025-03-11 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2025-24082 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-24081 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-24080 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-24079 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-24078 | High | 7.0 | 2025-03-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-24077 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-24072 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
CVE-2025-24064 | High | 8.1 | 2025-03-11 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2025-24046 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-24044 | High | 7.8 | 2025-03-11 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2025-23402 | High | 7.8 | 2025-03-11 | A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009)… |
CVE-2025-2136 | High | 8.8 | 2025-03-10 | Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-12837 | High | 7.8 | 2025-03-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. |
CVE-2024-58083 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the targ… |
CVE-2024-58072 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update heade… |
CVE-2024-58060 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing … |
CVE-2025-1916 | High | 8.8 | 2025-03-05 | Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2025-1931 | High | 7.5 | 2025-03-04 | It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerabil… |
CVE-2025-1930 | High | 8.8 | 2025-03-04 | On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led t… |
CVE-2025-24301 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-23414 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-23409 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-20626 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-20091 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-20081 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-21424 | High | 7.8 | 2025-03-03 | Memory corruption while calling the NPU driver APIs concurrently. |
CVE-2024-53023 | High | 7.8 | 2025-03-03 | Memory corruption may occur while accessing a variable during extended back to back tests. |
CVE-2024-45580 | High | 7.8 | 2025-03-03 | Memory corruption while handling multuple IOCTL calls from userspace for remote invocation. |
CVE-2024-43062 | High | 7.8 | 2025-03-03 | Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization. |
CVE-2024-43061 | High | 7.8 | 2025-03-03 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive. |
CVE-2024-43059 | High | 7.8 | 2025-03-03 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
CVE-2024-43057 | High | 7.8 | 2025-03-03 | Memory corruption while processing command in Glink linux. |
CVE-2025-23115 | Critical | 9.0 | 2025-03-01 | A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras man… |
CVE-2025-21812 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev->ax25_ptr syzbot found a lockdep issue [1]. We should remove ax25… |
CVE-2025-21811 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active references nilfs_lookup_dirty_data_buffe… |
CVE-2024-58034 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() As… |
CVE-2025-21797 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The cancel_delayed_… |
CVE-2025-21796 | Critical | 9.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl… |
CVE-2025-21791 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU bein… |
CVE-2025-21786 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer from the pool The commit 68f83057b913(… |
CVE-2025-21764 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RT… |
CVE-2025-21763 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without… |
CVE-2025-21762 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protec… |
CVE-2025-21761 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() ca… |
CVE-2025-21760 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without R… |
CVE-2025-21759 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTN… |
CVE-2025-21756 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes… |
CVE-2025-21753 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are tryi… |
CVE-2025-21751 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, change error flow on matcher disconnect Currently, when firmware failure o… |
CVE-2025-21739 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devm_blk_crypto_profil… |
CVE-2024-58013 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes… |
CVE-2024-58002 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a poi… |
CVE-2024-54458 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any is… |
CVE-2024-49570 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TP_printk UAF The commit afd2627f727b ("tracing: Check "%… |
CVE-2025-21731 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: … |
CVE-2025-21729 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion The rtwdev->scanning… |
CVE-2025-21727 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-us… |
CVE-2025-21726 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF fo… |
CVE-2025-21722 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect bu… |
CVE-2025-21718 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinl… |
CVE-2025-21715 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be use… |
CVE-2025-21714 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr des… |
CVE-2024-57995 | High | 8.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() In ath12k_ma… |
CVE-2024-57984 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition In dw_i3c_commo… |
CVE-2024-57979 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-a… |
CVE-2022-49724 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to free_irq() to fix this… |
CVE-2022-49711 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() In fsl_mc_bus_remove()… |
CVE-2022-49700 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slab_alloc_node() a… |
CVE-2022-49696 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free Read in tipc_named_reinit syzbot found the following issue on: =… |
CVE-2022-49695 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igb_clean_tx_ring Fix the following use-after-free bug… |
CVE-2022-49694 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: block: disable the elevator int del_gendisk The elevator is only used for file system req… |