CWE-416 · Use After Free (page 30)
Page 30 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-6636 | High | 7.8 | 2025-07-29 | A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vu… |
CVE-2025-38488 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-500… |
CVE-2025-38485 | High | 7.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush… |
CVE-2025-38476 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in self… |
CVE-2025-38471 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP comp… |
CVE-2025-8176 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tif… |
CVE-2025-38464 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_c… |
CVE-2025-38449 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released… |
CVE-2025-38443 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: bl… |
CVE-2025-38437 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return… |
CVE-2025-38386 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platfo… |
CVE-2025-38378 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_p… |
CVE-2025-38377 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose… |
CVE-2025-38369 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using … |
CVE-2025-4878 | Low | 3.6 | 2025-07-22 | A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be t… |
CVE-2025-47917 | High | 8.9 | 2025-07-20 | Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedt… |
CVE-2025-38350 | High | 7.8 | 2025-07-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdis… |
CVE-2025-38349 | High | 7.8 | 2025-07-18 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points… |
CVE-2025-7657 | High | 8.8 | 2025-07-15 | Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2025-7042 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allo… |
CVE-2025-6973 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow… |
CVE-2025-6972 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability cou… |
CVE-2025-6971 | High | 7.8 | 2025-07-15 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability cou… |
CVE-2025-3631 | Medium | 6.5 | 2025-07-11 | An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. |
CVE-2025-52946 | High | 7.5 | 2025-07-11 | A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sendi… |
CVE-2025-7425 | High | 7.8 | 2025-07-10 | A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as… |
CVE-2025-38346 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens wit… |
CVE-2025-38323 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in… |
CVE-2025-38289 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a… |
CVE-2025-38259 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gets and enables all… |
CVE-2025-38250 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in… |
CVE-2025-38248 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a… |
CVE-2025-49735 | High | 8.1 | 2025-07-08 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network. |
CVE-2025-49733 | High | 7.8 | 2025-07-08 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2025-49726 | High | 7.8 | 2025-07-08 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
CVE-2025-49725 | High | 7.8 | 2025-07-08 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
CVE-2025-49724 | High | 8.8 | 2025-07-08 | Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-49711 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-49703 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-49700 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-49699 | High | 7.0 | 2025-07-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-49698 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-49695 | High | 8.4 | 2025-07-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-49685 | High | 7.0 | 2025-07-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2025-49682 | High | 7.3 | 2025-07-08 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-49677 | High | 7.0 | 2025-07-08 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-49675 | High | 7.8 | 2025-07-08 | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-49665 | High | 7.8 | 2025-07-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privil… |
CVE-2025-49660 | High | 7.8 | 2025-07-08 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
CVE-2025-48821 | High | 7.1 | 2025-07-08 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network. |
CVE-2025-48806 | High | 7.8 | 2025-07-08 | Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally. |
CVE-2025-48000 | High | 7.8 | 2025-07-08 | Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-47991 | High | 7.8 | 2025-07-08 | Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
CVE-2025-47986 | High | 8.8 | 2025-07-08 | Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-47976 | High | 7.8 | 2025-07-08 | Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-27056 | High | 7.8 | 2025-07-08 | Memory corruption during sub-system restart while processing clean-up to free up resources. |
CVE-2025-27050 | High | 7.8 | 2025-07-08 | Memory corruption while processing event close when client process terminates abruptly. |
CVE-2025-27047 | High | 7.8 | 2025-07-08 | Memory corruption while processing the TESTPATTERNCONFIG escape path. |
CVE-2025-21466 | High | 7.8 | 2025-07-08 | Memory corruption while processing a private escape command in an event trigger. |
CVE-2025-38236 | High | 7.8 | 2025-07-08 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i… |
CVE-2025-53185 | Medium | 6.6 | 2025-07-07 | Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploi… |
CVE-2025-38227 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reporte… |
CVE-2025-38212 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after… |
CVE-2025-38211 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac3… |
CVE-2025-38209 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue config fails Commit 104d0e2f6222 ("nvme-… |
CVE-2025-38187 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() The RPC container is released af… |
CVE-2025-38180 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev… |
CVE-2025-38176 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binderfs 16 --t… |
CVE-2025-38175 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: binder: fix yet another UAF in binder_devices Commit e77aff5528a18 ("binderfs: fix use-af… |
CVE-2025-38172 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primar… |
CVE-2025-38154 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not lock… |
CVE-2025-38141 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was… |
CVE-2025-38137 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger u… |
CVE-2025-38131 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active… |
CVE-2025-38129 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_… |
CVE-2025-38118 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_… |
CVE-2025-38117 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex to protect… |
CVE-2025-38116 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_hw_group_as… |
CVE-2025-38109 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual fu… |
CVE-2025-38106 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: B… |
CVE-2025-52886 | Medium | 5.9 | 2025-07-02 | Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is po… |
CVE-2025-38087 | High | 7.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_notifier()… |
CVE-2025-0634 | Critical | 9.8 | 2025-06-30 | Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. |
CVE-2025-6856 | Low | 3.3 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipula… |
CVE-2025-6706 | Medium | 5.0 | 2025-06-26 | An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have author… |
CVE-2025-6661 | High | 7.8 | 2025-06-25 | PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2025-6646 | Low | 3.3 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2025-6645 | High | 7.8 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2025-6644 | High | 7.8 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2025-6640 | High | 7.8 | 2025-06-25 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2025-6555 | Medium | 5.4 | 2025-06-24 | Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2025-6424 | Critical | 9.8 | 2025-06-24 | A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.1… |
CVE-2025-48945 | | 2025-06-20 | pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior t… | |
CVE-2025-6275 | Low | 3.3 | 2025-06-19 | A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been declared as problematic. Affected by this vulnerability is the function GetFuncOffset o… |
CVE-2025-49014 | | 2025-06-19 | jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This is… | |
CVE-2025-6192 | High | 8.8 | 2025-06-18 | Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2022-50229 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix a UAF bug on the error path of probing When the driver fails in snd_ca… |
CVE-2022-50220 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnet_deferred_k… |
CVE-2022-50219 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix KASAN use-after-free Read in compute_effective_progs Syzbot found a Use After Fr… |
CVE-2022-50214 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: coresight: Clear the connection field properly coresight devices track their connections… |