CWE-416 · Use After Free (page 33)
Page 33 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-46796 | Critical | 9.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_compound_op() is ca… |
CVE-2024-46786 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fscache_cook… |
CVE-2024-46782 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_… |
CVE-2024-46781 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a… |
CVE-2024-46762 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneou… |
CVE-2024-46746 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't ca… |
CVE-2024-46740 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied indiv… |
CVE-2024-46738 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a… |
CVE-2024-46716 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor Remove list_… |
CVE-2024-8947 | Medium | 5.6 | 2024-09-17 | A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/ob… |
CVE-2024-43758 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2024-41869 | High | 7.8 | 2024-09-13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39385 | Medium | 5.5 | 2024-09-13 | Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-46696 | Critical | 9.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference… |
CVE-2024-46687 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() [BUG] There i… |
CVE-2024-46683 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of the queue, therefore i… |
CVE-2024-46674 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe functio… |
CVE-2024-45016 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() intr… |
CVE-2024-45013 | Critical | 9.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctrl() Commit 4733b65d82bd ("nvme: start… |
CVE-2024-8639 | High | 8.8 | 2024-09-11 | Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2024-8638 | High | 8.8 | 2024-09-11 | Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
CVE-2024-8637 | High | 8.8 | 2024-09-11 | Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a craft… |
CVE-2024-8636 | High | 8.8 | 2024-09-11 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-23716 | High | 7.0 | 2024-09-11 | In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the… |
CVE-2024-43491 | Critical | 9.8 | 2024-09-10 | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, v… |
CVE-2024-43465 | High | 7.8 | 2024-09-10 | Microsoft Excel Elevation of Privilege Vulnerability |
CVE-2024-43463 | High | 7.8 | 2024-09-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-38259 | High | 8.8 | 2024-09-10 | Microsoft Management Console Remote Code Execution Vulnerability |
CVE-2024-38253 | High | 7.8 | 2024-09-10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-38252 | High | 7.8 | 2024-09-10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-38249 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38248 | High | 7.0 | 2024-09-10 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-38235 | Medium | 6.5 | 2024-09-10 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-38119 | High | 7.5 | 2024-09-10 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
CVE-2024-26186 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-31960 | High | 7.8 | 2024-09-10 | An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after… |
CVE-2024-8394 | Medium | 6.5 | 2024-09-06 | When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vuln… |
CVE-2024-45107 | Medium | 5.5 | 2024-09-05 | Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to di… |
CVE-2024-45063 | High | 8.8 | 2024-09-05 | The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running… |
CVE-2024-43102 | Critical | 10.0 | 2024-09-05 | Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference c… |
CVE-2024-44998 | Critical | 9.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after ca… |
CVE-2024-44997 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() When ther… |
CVE-2024-44987 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After i… |
CVE-2024-44986 | High | 8.1 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has… |
CVE-2024-44985 | Critical | 9.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb has been… |
CVE-2024-44978 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Free job before xe_exec_queue_put Free job depends on job->vm being valid, the la… |
CVE-2024-44974 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp select_local_address() and select_signa… |
CVE-2024-44964 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tagged commit… |
CVE-2024-8362 | High | 8.8 | 2024-09-03 | Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-8384 | Critical | 9.8 | 2024-09-03 | The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could ha… |
CVE-2024-3655 | High | 7.8 | 2024-09-03 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2024-38402 | High | 7.8 | 2024-09-02 | Memory corruption while processing IOCTL call for getting group info. |
CVE-2024-38401 | High | 7.8 | 2024-09-02 | Memory corruption while processing concurrent IOCTL calls. |
CVE-2024-33060 | High | 8.4 | 2024-09-02 | Memory corruption when two threads try to map and unmap a single node simultaneously. |
CVE-2024-23365 | High | 8.4 | 2024-09-02 | Memory corruption while releasing shared resources in MinkSocket listener thread. |
CVE-2024-41160 | High | 8.8 | 2024-09-02 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use afte… |
CVE-2024-41157 | High | 8.8 | 2024-09-02 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use afte… |
CVE-2024-44946 | High | 7.8 | 2024-08-31 | In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release()… |
CVE-2024-44941 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to cover read extent cache access with lock syzbot reports a f2fs bug as below… |
CVE-2024-44934 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after… |
CVE-2024-44932 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix UAFs when destroying the queues The second tagged commit started sometimes (ver… |
CVE-2024-43900 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: media: xc2028: avoid use-after-free in load_firmware_cb() syzkaller reported use-after-fr… |
CVE-2024-43891 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: tracing: Have format file honor EVENT_FILE_FL_FREED When eventfs was introduced, special… |
CVE-2024-43888 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be… |
CVE-2024-43883 | Critical | 9.8 | 2024-08-23 | In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places th… |
CVE-2022-48935 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on netns exit Unregister flowtable hooks… |
CVE-2022-48925 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside state checks If the state is not idle… |
CVE-2022-48913 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: blktrace: fix use after free for struct blk_trace When tracing the whole disk, 'dropped'… |
CVE-2022-48912 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in __nf_register_net_hook() We must not dereference @new_ho… |
CVE-2022-48911 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() sid… |
CVE-2024-7968 | High | 8.8 | 2024-08-21 | Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions t… |
CVE-2024-7964 | High | 8.8 | 2024-08-21 | Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2024-7725 | High | 8.8 | 2024-08-21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-7724 | High | 8.8 | 2024-08-21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-7723 | High | 8.8 | 2024-08-21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-7722 | Medium | 4.3 | 2024-08-21 | Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information o… |
CVE-2023-52913 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gem_context_register() makes the context visible to… |
CVE-2023-52907 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() Fix a use-after-free… |
CVE-2022-48899 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to r… |
CVE-2022-48892 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() Since commit 07ec77a1d4e8 ("sch… |
CVE-2022-48878 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Fix driver shutdown on closed serdev The driver shutdown callback (wh… |
CVE-2022-48874 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find Currently, there is a race… |
CVE-2022-48873 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not remove the m… |
CVE-2022-48872 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition for maps It is possible that in between… |
CVE-2022-48869 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee… |
CVE-2022-48867 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Prevent use after free on completion memory On driver unload any pending… |
CVE-2024-43864 | Critical | 9.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit allocates… |
CVE-2024-32927 | High | 7.8 | 2024-08-19 | In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no ad… |
CVE-2024-43853 | High | 7.0 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/cpuset is r… |
CVE-2024-43830 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which hav… |
CVE-2024-42314 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding pages to compressed bio At add_ra_bio_pa… |
CVE-2024-42313 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after f… |
CVE-2024-42302 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-f… |
CVE-2024-42285 | Critical | 9.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associ… |
CVE-2024-42280 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix a use after free in hfcmulti_tx() Don't dereference *sp after calling dev_kfre… |
CVE-2024-42271 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use after free in iucv_sock_close() iucv_sever_path() is called from proces… |
CVE-2024-43472 | Medium | 5.8 | 2024-08-16 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-43374 | Medium | 4.5 | 2024-08-16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers… |
CVE-2024-41831 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-41830 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |