CWE-416 · Use After Free (page 32)
Page 32 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-29978 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2025-29977 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29970 | High | 7.8 | 2025-05-13 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-29841 | High | 7.0 | 2025-05-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker… |
CVE-2025-29831 | High | 7.5 | 2025-05-13 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-31239 | Medium | 4.3 | 2025-05-12 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS… |
CVE-2023-53145 | High | 7.8 | 2025-05-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdi… |
CVE-2025-37885 | High | 8.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back t… |
CVE-2025-37882 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these… |
CVE-2025-37869 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in… |
CVE-2025-37861 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task ma… |
CVE-2025-37854 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to… |
CVE-2025-37849 | High | 8.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to sha… |
CVE-2025-37845 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe… |
CVE-2025-31946 | Medium | 6.2 | 2025-05-08 | Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corru… |
CVE-2025-27578 | High | 7.5 | 2025-05-08 | Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading t… |
CVE-2025-37823 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patc… |
CVE-2025-37819 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m… |
CVE-2025-4372 | High | 8.8 | 2025-05-06 | Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2025-21453 | High | 7.8 | 2025-05-06 | Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. |
CVE-2024-45583 | Medium | 6.6 | 2025-05-06 | Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations. |
CVE-2024-45567 | High | 7.8 | 2025-05-06 | Memory corruption while encoding JPEG format. |
CVE-2024-45566 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent buffer access due to modification of the reference count. |
CVE-2024-45564 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent access to server info object due to incorrect reference count update. |
CVE-2024-45562 | Medium | 6.6 | 2025-05-06 | Memory corruption during concurrent access to server info object due to unprotected critical field. |
CVE-2024-45554 | High | 7.8 | 2025-05-06 | Memory corruption during concurrent SSR execution due to race condition on the global maps list. |
CVE-2023-53138 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in… |
CVE-2023-53123 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI func… |
CVE-2023-53116 | Critical | 9.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() oper… |
CVE-2023-53111 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_filebacked() calls blk_mq_complete_request() synch… |
CVE-2023-53107 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: veth: Fix use after free in XDP_REDIRECT Commit 718a18a0c8a6 ("veth: Rework veth_xdp_rcv_… |
CVE-2023-53106 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition This bug influen… |
CVE-2023-53088 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the… |
CVE-2023-53084 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't ow… |
CVE-2023-53082 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix the crash in hot unplug with vp_vdpa While unplugging the vp_vdpa device, it… |
CVE-2023-53075 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec() when index is 0 KASAN reported follow… |
CVE-2023-53072 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token… |
CVE-2023-53052 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix use-after-free bug in refresh_cache_worker() The UAF bug occurred because we we… |
CVE-2023-53039 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notif… |
CVE-2023-53037 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer sup… |
CVE-2025-37797 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-F… |
CVE-2025-1884 | High | 7.8 | 2025-05-02 | Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could a… |
CVE-2025-0427 | High | 7.8 | 2025-05-02 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2025-0072 | High | 7.8 | 2025-05-02 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2025-27365 | Medium | 6.5 | 2025-05-01 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 throug… |
CVE-2022-49921 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in red_enqueue() We can't use "skb" again after passing it… |
CVE-2022-49919 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flow rule object from commit path No need to postpone this… |
CVE-2022-49910 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu Fix the race conditio… |
CVE-2022-49892 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ft… |
CVE-2022-49882 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache Reject kvm_gpc_check… |
CVE-2022-49842 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix use-after-free in snd_soc_exit() KASAN reports a use-after-free: BUG: KA… |
CVE-2022-49840 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() We got a syzkaller proble… |
CVE-2022-49834 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free bug of ns_writer on remount If a nilfs2 filesystem is downgrad… |
CVE-2022-49811 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drbd: use after free in drbd_create_device() The drbd_destroy_connection() frees the "con… |
CVE-2022-49779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case In __unregister_… |
CVE-2022-49770 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fai… |
CVE-2022-49763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about Attribute… |
CVE-2025-37796 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by pri… |
CVE-2025-37786 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it… |
CVE-2025-37778 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and doe… |
CVE-2025-37777 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_c… |
CVE-2025-37776 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_al… |
CVE-2025-37765 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix ttm_bo_delayed_delete oops Fix an oops in ttm_bo_delayed_delete w… |
CVE-2025-37763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a… |
CVE-2025-37750 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: cli… |
CVE-2025-37738 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore… |
CVE-2025-23142 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-use… |
CVE-2025-30194 | High | 7.5 | 2025-04-29 | When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illeg… |
CVE-2025-31197 | Medium | 5.7 | 2025-04-29 | The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve… |
CVE-2025-24252 | High | 8.8 | 2025-04-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS… |
CVE-2025-1048 | High | 8.8 | 2025-04-23 | Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary cod… |
CVE-2025-1046 | High | 7.8 | 2025-04-23 | Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2025-37838 | High | 7.8 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Con… |
CVE-2021-47670 | High | 8.8 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferen… |
CVE-2021-47669 | High | 7.8 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferenc… |
CVE-2021-47668 | High | 8.8 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferenci… |
CVE-2025-1290 | High | 8.1 | 2025-04-17 | A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and… |
CVE-2025-1704 | Medium | 6.5 | 2025-04-16 | ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices… |
CVE-2025-3620 | High | 8.8 | 2025-04-16 | Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2025-22126 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md… |
CVE-2025-22097 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization f… |
CVE-2025-22088 | Critical | 9.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_… |
CVE-2025-22085 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-fr… |
CVE-2025-22083 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_e… |
CVE-2025-22068 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depends on `ub… |
CVE-2025-22041 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue… |
CVE-2025-22040 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition be… |
CVE-2025-22036 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer… |
CVE-2025-22035 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function_flags during tracer switching Kairui… |
CVE-2025-22024 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix management of listener transports Currently, when no active threads are running… |
CVE-2024-58093 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f… |
CVE-2025-22023 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 ("usb: xhc… |
CVE-2025-22020 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the f… |
CVE-2023-42970 | High | 8.8 | 2025-04-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari… |
CVE-2025-3416 | Low | 3.7 | 2025-04-08 | A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may res… |
CVE-2025-29824 | High | 7.8 | 2025-04-08 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-29823 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29820 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-29792 | High | 7.3 | 2025-04-08 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
CVE-2025-27751 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |