CWE-416 · Use After Free (page 33)
Page 33 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-27750 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-27749 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27748 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27746 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27745 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-27730 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-27729 | High | 7.8 | 2025-04-08 | Use after free in Windows Shell allows an unauthorized attacker to execute code locally. |
CVE-2025-27492 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-27491 | High | 7.1 | 2025-04-08 | Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network. |
CVE-2025-27480 | High | 8.1 | 2025-04-08 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-27476 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-27467 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-27200 | High | 7.8 | 2025-04-08 | Animate versions 24.0.7, 23.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2025-26687 | High | 7.5 | 2025-04-08 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-26681 | Medium | 6.7 | 2025-04-08 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2025-26679 | High | 7.8 | 2025-04-08 | Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-26671 | High | 8.1 | 2025-04-08 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-26670 | High | 8.1 | 2025-04-08 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2025-26663 | High | 8.1 | 2025-04-08 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2025-26649 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-26648 | High | 7.8 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-26640 | High | 7.0 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-31498 | | 2025-04-08 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a quer… | |
CVE-2025-21437 | High | 7.8 | 2025-04-07 | Memory corruption while processing memory map or unmap IOCTL operations simultaneously. |
CVE-2025-21436 | High | 7.8 | 2025-04-07 | Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. |
CVE-2024-49848 | Medium | 6.7 | 2025-04-07 | Memory corruption while processing multiple IOCTL calls from HLOS to DSP. |
CVE-2024-45544 | Medium | 6.6 | 2025-04-07 | Memory corruption while processing IOCTL calls to add route entry in the HW. |
CVE-2024-45540 | Medium | 6.6 | 2025-04-07 | Memory corruption while invoking IOCTL map buffer request from userspace. |
CVE-2024-43066 | High | 7.8 | 2025-04-07 | Memory corruption while handling file descriptor during listener registration/de-registration. |
CVE-2024-11235 | High | 8.1 | 2025-04-04 | In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-fre… |
CVE-2025-29815 | High | 7.6 | 2025-04-04 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2025-31115 | | 2025-04-03 | XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma… | |
CVE-2025-22004 | High | 8.6 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the l… |
CVE-2025-21999 | High | 7.8 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiat… |
CVE-2025-3066 | High | 8.8 | 2025-04-02 | Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2025-21979 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from th… |
CVE-2025-21969 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync comma… |
CVE-2025-21968 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcp_work [Why] A slab-use-after-free is repo… |
CVE-2025-21967 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could b… |
CVE-2025-21945 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock->zero_len has value, ->llist of smb_lo… |
CVE-2025-21934 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rio_add_net() fails rio_add_net() calls device_register()… |
CVE-2025-21929 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() During the `rmmod`… |
CVE-2025-21928 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experie… |
CVE-2025-21923 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-steam: Fix use-after-free when detaching device When a hid-steam device is remov… |
CVE-2025-21915 | High | 7.0 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driver_override_show() Fixed a possible UAF problem in dri… |
CVE-2025-21896 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: fuse: revert back to __readahead_folio() for readahead In commit 3eab9d7bc2f4 ("fuse: con… |
CVE-2025-3030 | High | 8.1 | 2025-04-01 | Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption a… |
CVE-2025-3028 | Medium | 6.5 | 2025-04-01 | JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firef… |
CVE-2025-30427 | Medium | 4.3 | 2025-03-31 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoi… |
CVE-2025-21893 | High | 7.8 | 2025-03-31 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference count has been reduced to 0, the garbag… |
CVE-2025-2913 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FL__blk_gc_list of the file src/H5FL.c… |
CVE-2025-30232 | High | 8.1 | 2025-03-28 | A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges. |
CVE-2023-53023 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fix a use-after-free that occurs in kfree… |
CVE-2023-53021 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free syzbot reported a nasty crash [1] in n… |
CVE-2023-53016 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix possible deadlock in rfcomm_sk_state_change syzbot reports a possible dead… |
CVE-2023-53003 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info The memory for l… |
CVE-2023-52999 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: fix UaF in netns ops registration error path If net_assign_generic() fails, the curr… |
CVE-2023-52983 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bic_set_bfqq() After commit 64dc8c732f5c ("block, bfq: fi… |
CVE-2023-52975 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress Bug report and… |
CVE-2023-52974 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_… |
CVE-2023-52973 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF After a call to… |
CVE-2023-52935 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, collapse_and_… |
CVE-2023-52931 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vm_xa table makes it vis… |
CVE-2022-49761 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref() Currently we have a btrfs_debug() for… |
CVE-2022-49755 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait While performing fast compositi… |
CVE-2022-49753 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan… |
CVE-2025-21887 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was cau… |
CVE-2025-21883 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling ice_create_… |
CVE-2025-21879 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning root during em shrinking At btrfs_scan_r… |
CVE-2025-21867 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-… |
CVE-2025-2532 | High | 7.8 | 2025-03-25 | Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2025-0835 | High | 7.8 | 2025-03-24 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. |
CVE-2025-2476 | High | 8.8 | 2025-03-19 | Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2023-52927 | High | 7.8 | 2025-03-14 | In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_i… |
CVE-2025-24855 | High | 7.8 | 2025-03-14 | numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is… |
CVE-2024-55549 | High | 7.8 | 2025-03-14 | xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. |
CVE-2025-1432 | High | 7.8 | 2025-03-13 | A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerabili… |
CVE-2025-25568 | Critical | 9.8 | 2025-03-12 | SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes this becaus… |
CVE-2025-21861 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() If mig… |
CVE-2025-21858 | High | 7.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in g… |
CVE-2025-21856 | High | 7.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release() in /driver… |
CVE-2025-21855 | High | 8.6 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushin… |
CVE-2025-2013 | High | 7.8 | 2025-03-11 | Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2025-27181 | High | 7.8 | 2025-03-11 | Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context o… |
CVE-2025-27174 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-27160 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-27159 | High | 7.8 | 2025-03-11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… |
CVE-2025-0151 | High | 8.5 | 2025-03-11 | Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access. |
CVE-2025-26630 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2025-26629 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-24983 | High | 7.0 | 2025-03-11 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2025-24082 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-24081 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-24080 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-24079 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-24078 | High | 7.0 | 2025-03-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-24077 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-24072 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
CVE-2025-24064 | High | 8.1 | 2025-03-11 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2025-24046 | High | 7.8 | 2025-03-11 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |