CWE-416 · Use After Free (page 31)
Page 31 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-50213 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow SET_ID to refer to another table When doing lookups fo… |
CVE-2022-50212 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow CHAIN_ID to refer to another table When doing lookups… |
CVE-2022-50192 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra20-slink: fix UAF in tegra_slink_remove() After calling spi_unregister_master()… |
CVE-2022-50190 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix simplification of devm_spi_register_controller This reverts commit 59ebbe40fb51… |
CVE-2022-50179 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb Syzbot reported use-after-free Read in a… |
CVE-2022-50137 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause pr… |
CVE-2022-50129 | High | 7.0 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix a use-after-free Change the LIO port members inside struct srpt_port from… |
CVE-2022-50095 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b… |
CVE-2022-50092 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dm_sm_register_threshold_callback Fault inject on po… |
CVE-2022-50087 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails When scpi probe f… |
CVE-2022-50072 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then w… |
CVE-2022-50067 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() In btrfs_… |
CVE-2022-50064 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Avoid use-after-free on suspend/resume hctx->user_data is set to vq in virtbl… |
CVE-2022-50035 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex If amdgpu_cs_vm_handling returns r… |
CVE-2022-50034 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3 fix use-after-free at workaround 2 BUG: KFENCE: use-after-free read in __list_… |
CVE-2022-50022 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" d… |
CVE-2022-50021 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ext4: block range must be validated before use in ext4_mb_clear_bb() Block range to free… |
CVE-2022-50005 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout When the pn532 uart devic… |
CVE-2022-50000 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow ta… |
CVE-2022-49995 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdi_unregis… |
CVE-2022-49980 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usb_udc_uevent() The syzbot fuzzer found a race b… |
CVE-2022-49968 | High | 8.0 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroy_workqueue call There is a possible race condition (use-… |
CVE-2022-49956 | High | 7.0 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs _Read/Write_MACREG callbacks are NULL so the re… |
CVE-2022-49951 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix use-after-free during unregister In the following code within firmwa… |
CVE-2022-49939 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref->proc caused by race condition A transaction of type BINDER_TYPE_W… |
CVE-2022-49935 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later Previously when we added a fence… |
CVE-2022-49934 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211_scan_rx() ieee80211_scan_rx() tries to access scan_r… |
CVE-2025-38076 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: alloc_tag: allocate percpu counters for module tags dynamically When a module gets unload… |
CVE-2025-38056 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hda_generic_machine_select() appends… |
CVE-2025-38052 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-u… |
CVE-2025-38051 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the read… |
CVE-2025-38024 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <TASK> __du… |
CVE-2025-38022 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem Call Trace… |
CVE-2025-38019 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices The driver only… |
CVE-2025-46710 | Medium | 5.7 | 2025-06-16 | Possible kernel exceptions caused by reading and writing kernel heap data after free. |
CVE-2025-6119 | Medium | 5.3 | 2025-06-16 | A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChan… |
CVE-2025-5991 | | 2025-06-11 | There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affect… | |
CVE-2025-5958 | High | 8.8 | 2025-06-11 | Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2025-43577 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43576 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43574 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43573 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-43550 | High | 7.8 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-47957 | High | 8.4 | 2025-06-10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47175 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2025-47170 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47168 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-47165 | High | 7.8 | 2025-06-10 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-47164 | High | 8.4 | 2025-06-10 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-47106 | Medium | 5.5 | 2025-06-10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2025-43589 | High | 7.8 | 2025-06-10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont… |
CVE-2025-33071 | High | 8.1 | 2025-06-10 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network. |
CVE-2025-32712 | High | 7.8 | 2025-06-10 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2025-32710 | High | 8.1 | 2025-06-10 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-38000 | High | 7.8 | 2025-06-06 | In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the fi… |
CVE-2025-5644 | Low | 2.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr… |
CVE-2025-23106 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation. |
CVE-2025-23101 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile processor leads to privilege escalation. |
CVE-2025-23098 | High | 7.8 | 2025-06-03 | An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in the mobile processor leads to privilege… |
CVE-2025-27038 | High | 7.5 | 2025-06-03 | Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. |
CVE-2025-27031 | High | 7.8 | 2025-06-03 | memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed. |
CVE-2024-53015 | Medium | 6.6 | 2025-06-03 | Memory corruption while processing IOCTL command to handle buffers associated with a session. |
CVE-2025-5068 | High | 8.8 | 2025-06-03 | Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2025-23104 | Medium | 6.5 | 2025-06-02 | An issue was discovered in Samsung Mobile Processor Exynos 2200. A Use-After-Free in the mobile processor leads to privilege escalation. |
CVE-2025-5036 | High | 7.8 | 2025-06-02 | A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vuln… |
CVE-2025-0819 | High | 7.8 | 2025-06-02 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2025-0073 | High | 7.8 | 2025-06-02 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2023-26226 | Critical | 9.8 | 2025-05-30 | A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 |
CVE-2025-44906 | High | 7.8 | 2025-05-30 | jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c. |
CVE-2025-5283 | Medium | 5.4 | 2025-05-27 | Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2025-5063 | High | 8.8 | 2025-05-27 | Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2025-48798 | High | 7.3 | 2025-05-27 | A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be… |
CVE-2025-48752 | Low | 2.9 | 2025-05-24 | In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked. |
CVE-2025-5100 | High | 8.0 | 2025-05-23 | A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code… |
CVE-2025-37957 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit ed129ec9057… |
CVE-2025-37952 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destr… |
CVE-2025-37946 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit… |
CVE-2025-37926 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race c… |
CVE-2025-37924 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introd… |
CVE-2025-37916 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error popped up in stress… |
CVE-2025-37903 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies… |
CVE-2025-37899 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use… |
CVE-2025-1706 | High | 7.5 | 2025-05-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2025-37890 | High | 7.8 | 2025-05-16 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described… |
CVE-2025-4516 | | 2025-05-15 | There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an erro… | |
CVE-2025-43571 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43570 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43568 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43549 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-20062 | Medium | 6.1 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20046 | High | 8.0 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20006 | High | 7.4 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-32709 | High | 7.8 | 2025-05-13 | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-32701 | High | 7.8 | 2025-05-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-30400 | High | 7.8 | 2025-05-13 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2025-30393 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-30386 | High | 8.4 | 2025-05-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-30385 | High | 7.8 | 2025-05-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-30377 | High | 8.4 | 2025-05-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-29978 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |