CWE-416 · Use After Free (page 31)
Page 31 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8816 | Medium | 5.5 | 2024-11-22 | PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2024-11570 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11545 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11525 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11521 | High | 7.8 | 2024-11-22 | IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-53095 | Critical | 9.8 | 2024-11-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report… |
CVE-2018-9483 | Medium | 6.5 | 2024-11-20 | In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2018-9428 | High | 7.8 | 2024-11-19 | In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code executio… |
CVE-2018-9417 | High | 7.8 | 2024-11-19 | In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with n… |
CVE-2018-9344 | High | 7.8 | 2024-11-19 | In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with… |
CVE-2024-53068 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() The scmi_dev->name is… |
CVE-2024-53057 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Qdis… |
CVE-2024-50293 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __smc_create() Thanks to commit 4bbd360a50… |
CVE-2024-50286 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a race condition bet… |
CVE-2024-50283 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be… |
CVE-2024-50280 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_O… |
CVE-2024-50274 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpf_get_link_ksettings When the device control plane is remo… |
CVE-2024-50269 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca ("usb: musb: sunx… |
CVE-2024-50267 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in debug printk The "dev_dbg(&urb->dev->dev… |
CVE-2024-50264 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopb… |
CVE-2023-52921 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() Since the gang_size check is outside of… |
CVE-2024-52568 | High | 7.8 | 2024-11-18 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2023-4679 | Medium | 5.5 | 2024-11-15 | A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38… |
CVE-2023-4134 | Medium | 5.5 | 2024-11-14 | A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rear… |
CVE-2024-40885 | Medium | 6.4 | 2024-11-13 | Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local acc… |
CVE-2024-34747 | High | 7.8 | 2024-11-13 | In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2024-4741 | High | 7.5 | 2024-11-13 | Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary… |
CVE-2024-11113 | High | 8.8 | 2024-11-12 | Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2024-11112 | High | 8.8 | 2024-11-12 | Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-49032 | High | 7.8 | 2024-11-12 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2024-49027 | High | 7.8 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-49021 | High | 7.8 | 2024-11-12 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2024-49016 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-49003 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-43642 | High | 7.5 | 2024-11-12 | Windows SMB Denial of Service Vulnerability |
CVE-2024-43625 | High | 8.1 | 2024-11-12 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
CVE-2024-43459 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-49526 | High | 7.8 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-9420 | High | 8.8 | 2024-11-12 | A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated… |
CVE-2024-50261 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: macsec: Fix use-after-free while sending the offloading packet KASAN reports the followin… |
CVE-2024-50257 | High | 7.0 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in get_info() ip6table_nat module unload has refcnt warning… |
CVE-2024-50226 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In support of investig… |
CVE-2024-50217 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() Mounting bt… |
CVE-2024-27530 | High | 8.4 | 2024-11-08 | wasm3 139076a contains a Use-After-Free in ForEachModule. |
CVE-2024-50186 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf->create fails We have recently noticed the… |
CVE-2024-50154 | Critical | 9.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). Martin KaFai Lau reported us… |
CVE-2024-50150 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to… |
CVE-2024-50149 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't free job in TDR Freeing job in TDR is not safe as TDR can pass the run_job… |
CVE-2024-10827 | High | 8.8 | 2024-11-06 | Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-10826 | High | 8.8 | 2024-11-06 | Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2024-50130 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: must hold reference on net namespace BUG: KASAN: slab-use-after-free in _… |
CVE-2024-50127 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer m… |
CVE-2024-50126 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in taprio_dump() Fix possible use-after-fr… |
CVE-2024-50125 | High | 8.0 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while… |
CVE-2024-50124 | High | 8.0 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on iso_sock_timeout conn->sk maybe have been unlinked/freed while… |
CVE-2024-50121 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net In the normal… |
CVE-2024-50114 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unregister redistributor for failed vCPU creation Alex reports that syzkaller… |
CVE-2024-50106 | Critical | 9.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix race between laundromat and free_stateid There is a race between laundromat han… |
CVE-2024-38424 | High | 7.8 | 2024-11-04 | Memory corruption during GNSS HAL process initialization. |
CVE-2024-38421 | High | 7.8 | 2024-11-04 | Memory corruption while processing GPU commands. |
CVE-2024-38419 | High | 7.8 | 2024-11-04 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
CVE-2024-38415 | High | 7.8 | 2024-11-04 | Memory corruption while handling session errors from firmware. |
CVE-2024-33068 | High | 7.5 | 2024-11-04 | Transient DOS while parsing fragments of MBSSID IE from beacon frame. |
CVE-2024-33033 | Medium | 6.7 | 2024-11-04 | Memory corruption while processing IOCTL calls to unmap the buffers. |
CVE-2024-33029 | Medium | 6.7 | 2024-11-04 | Memory corruption while handling the PDR in driver for getting the remote heap maps. |
CVE-2024-9826 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage thi… |
CVE-2024-8595 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage… |
CVE-2024-8590 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage th… |
CVE-2024-10488 | High | 8.8 | 2024-10-29 | Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-10459 | High | 7.5 | 2024-10-29 | An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox <… |
CVE-2024-50086 | Critical | 9.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is racy issue between smb2 session… |
CVE-2024-50085 | Critical | 9.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow Syzkaller reported this splat: … |
CVE-2024-50084 | Medium | 5.5 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() Commit a3c1e451… |
CVE-2024-50073 | High | 7.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-use-after-free in gsm_… |
CVE-2024-44285 | High | 7.8 | 2024-10-28 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS… |
CVE-2024-50067 | High | 7.8 | 2024-10-28 | In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args int… |
CVE-2024-47033 | High | 7.8 | 2024-10-25 | In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2024-47017 | High | 7.8 | 2024-10-25 | In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no… |
CVE-2024-48423 | High | 7.8 | 2024-10-24 | An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library. |
CVE-2024-50061 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race… |
CVE-2024-50059 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to rac… |
CVE-2024-50047 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes w… |
CVE-2024-50043 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When multiple FREE_STATEIDs are sent for the s… |
CVE-2024-50030 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/ct: prevent UAF in send_recv() Ensure we serialize with completion side to prevent… |
CVE-2024-50029 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync This checks if the ACL connection… |
CVE-2024-50027 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Free tzp copy along with the thermal zone The object pointed to by tz->tzp… |
CVE-2022-49029 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning a… |
CVE-2022-49026 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can'… |
CVE-2022-49025 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests… |
CVE-2022-49017 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipc_msg_validate As the call trace shows, the original skb w… |
CVE-2022-49015 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netif_rx() which may free… |
CVE-2022-49014 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach… |
CVE-2022-49006 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events hav… |
CVE-2022-49003 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix SRCU protection of nvme_ns_head list Walking the nvme_ns_head siblings list is… |
CVE-2022-48991 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Any codepath that zaps p… |
CVE-2022-48990 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free during gpu recovery [Why] [ 754.862560] refcount_t: u… |
CVE-2022-48988 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: memcg: fix possible use-after-free in memcg_write_event_control() memcg_write_event_contr… |
CVE-2022-48981 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drm_gem_shmem_mmap() doesn't own this r… |
CVE-2022-48964 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix potential use-after-free in ravb_rx_gbeth() The skb is delivered to napi_gro_re… |
CVE-2022-48962 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to n… |