CWE-416 · Use After Free (page 29)
Page 29 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1010 | High | 8.8 | 2025-02-04 | An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefo… |
CVE-2025-1009 | Critical | 9.8 | 2025-02-04 | An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135… |
CVE-2025-24898 | | 2025-02-03 | rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the… | |
CVE-2024-45571 | High | 7.8 | 2025-02-03 | Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. |
CVE-2024-45561 | High | 7.8 | 2025-02-03 | Memory corruption while handling IOCTL call from user-space to set latency level. |
CVE-2024-38412 | Medium | 6.6 | 2025-02-03 | Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors. |
CVE-2024-38411 | Medium | 6.6 | 2025-02-03 | Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. |
CVE-2025-0015 | High | 7.8 | 2025-02-03 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2025-21671 | High | 7.8 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta_alloc failed early, it frees allocated… |
CVE-2024-47899 | High | 7.8 | 2025-01-31 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-47898 | High | 7.8 | 2025-01-31 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-47891 | High | 7.8 | 2025-01-31 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2025-0762 | High | 8.8 | 2025-01-29 | Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exten… |
CVE-2024-40670 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privil… |
CVE-2024-40669 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privil… |
CVE-2024-40651 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no addi… |
CVE-2024-40649 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no addi… |
CVE-2024-34748 | High | 8.4 | 2025-01-28 | In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of pri… |
CVE-2024-0147 | Medium | 5.5 | 2025-01-28 | NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data… |
CVE-2025-24085 | Critical | 10.0 | 2025-01-27 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS… |
CVE-2024-54499 | High | 8.8 | 2025-01-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS… |
CVE-2022-49043 | High | 8.1 | 2025-01-26 | xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. |
CVE-2025-21655 | High | 7.8 | 2025-01-20 | In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_eventfd_do_sign… |
CVE-2024-57926 | High | 7.8 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err Th… |
CVE-2025-21652 | High | 7.8 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlan_get_iflink(). syzbot presented an use-after-free rep… |
CVE-2025-21631 | High | 7.8 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UA… |
CVE-2024-57900 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nf_register_net_hooks() syzbot found a race in ila_add_mapping()… |
CVE-2024-57896 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount During… |
CVE-2024-57892 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and t… |
CVE-2024-57887 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assign… |
CVE-2024-57857 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to net_device Do not manage a per device direct link to net_… |
CVE-2024-57801 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload… |
CVE-2024-57795 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The similar patch in siw is in the link: h… |
CVE-2025-21372 | High | 7.8 | 2025-01-14 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
CVE-2025-21366 | High | 7.8 | 2025-01-14 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2025-21362 | High | 8.4 | 2025-01-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21345 | High | 7.8 | 2025-01-14 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2025-21335 | High | 7.8 | 2025-01-14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
CVE-2025-21334 | High | 7.8 | 2025-01-14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
CVE-2025-21315 | High | 7.8 | 2025-01-14 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
CVE-2025-21307 | Critical | 9.8 | 2025-01-14 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
CVE-2025-21304 | High | 7.8 | 2025-01-14 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2025-21298 | Critical | 9.8 | 2025-01-14 | Windows OLE Remote Code Execution Vulnerability |
CVE-2025-21297 | High | 8.1 | 2025-01-14 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2025-21296 | High | 7.5 | 2025-01-14 | BranchCache Remote Code Execution Vulnerability |
CVE-2025-21295 | High | 8.1 | 2025-01-14 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
CVE-2025-21281 | High | 7.8 | 2025-01-14 | Microsoft COM for Windows Elevation of Privilege Vulnerability |
CVE-2025-21224 | High | 8.1 | 2025-01-14 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2024-57875 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk->conv_zones_bitmap Ensure that a disk revalidation changing the c… |
CVE-2024-57849 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling trigg… |
CVE-2024-57798 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While recei… |
CVE-2024-50051 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module which wil… |
CVE-2024-41149 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse `hctx` not removed from cpuhp callback list If the 'hctx' isn't rem… |
CVE-2024-56772 | High | 7.8 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_suite() In kunit_debugfs_create_suite()… |
CVE-2023-35685 | High | 7.8 | 2025-01-08 | In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2024-56434 | Medium | 4.4 | 2025-01-08 | UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. |
CVE-2025-0240 | Medium | 4.0 | 2025-01-07 | Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability w… |
CVE-2025-0238 | Medium | 5.3 | 2025-01-07 | Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability… |
CVE-2024-54030 | Medium | 4.4 | 2025-01-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free. |
CVE-2024-46981 | High | 7.0 | 2025-01-06 | Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage colle… |
CVE-2024-56765 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close() callback in vas_vm_ops struct The mapping VMA address is… |
CVE-2024-56764 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_disk() fails Inside ublk_abort_requests(), g… |
CVE-2024-56759 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tr… |
CVE-2024-45553 | High | 7.8 | 2025-01-06 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it… |
CVE-2024-33059 | Medium | 6.7 | 2025-01-06 | Memory corruption while processing frame command IOCTL calls. |
CVE-2024-33055 | Medium | 6.7 | 2025-01-06 | Memory corruption while invoking IOCTL calls to unmap the DMA buffers. |
CVE-2024-56693 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module initialization succeeds My colleague Wupe… |
CVE-2024-56678 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() can be calle… |
CVE-2024-46973 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-56675 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use bpf_prog_… |
CVE-2024-56672 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcg_unpin_online() blkcg_unpin_online() walks up the blkcg hiera… |
CVE-2024-56669 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cac… |
CVE-2024-56664 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket… |
CVE-2024-56658 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free… |
CVE-2024-56653 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump hci_devcd_append may lead to the re… |
CVE-2024-56652 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Remove register pool That pool implementation doesn't really work: if the… |
CVE-2024-56651 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can… |
CVE-2024-56642 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). syzkaller reported a use-a… |
CVE-2024-56640 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free i… |
CVE-2024-56635 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in default_opersta… |
CVE-2024-56631 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug in sg_rel… |
CVE-2024-56623 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after free on unload System crash is observed with stack trace war… |
CVE-2024-56619 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() Syzbot reported t… |
CVE-2024-56606 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_d… |
CVE-2024-56605 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() bt_soc… |
CVE-2024-56604 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() bt_sock_alloc… |
CVE-2024-56603 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_create() fre… |
CVE-2024-56602 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data… |
CVE-2024-56601 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches… |
CVE-2024-56600 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attache… |
CVE-2024-56582 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_endio() Shinichiro reported the following… |
CVE-2024-56581 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfs_ref_tree_mod() af… |
CVE-2024-56561 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() pci_epc_destroy() invokes p… |
CVE-2024-56558 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: make sure exp active before svc_export_show The function `e_show` was called with p… |
CVE-2024-56556 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binder_add_freeze_work() In binder_add_freeze_work() we iterate o… |
CVE-2024-56554 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix freeze UAF in binder_release_work() When a binder reference is cleaned up, an… |
CVE-2024-56551 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free [ +0.000021] BUG: KASAN: slab-use-after-free in dr… |
CVE-2024-56541 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() During ath12k module removal… |
CVE-2024-56538 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_kms: Unplug DRM device before removal Prevent userspace accesses to the DRM d… |
CVE-2024-53239 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release th… |