CWE-416 · Use After Free (page 34)
Page 34 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39424 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39422 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39388 | High | 7.8 | 2024-08-14 | Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-39383 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-34117 | High | 7.8 | 2024-08-14 | Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-20789 | High | 7.8 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curren… |
CVE-2024-38199 | Critical | 9.8 | 2024-08-13 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2024-38193 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38171 | High | 7.8 | 2024-08-13 | Microsoft PowerPoint Remote Code Execution Vulnerability |
CVE-2024-38159 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38158 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-38150 | High | 7.8 | 2024-08-13 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-38147 | High | 7.8 | 2024-08-13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-38141 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38140 | Critical | 9.8 | 2024-08-13 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
CVE-2024-38138 | High | 7.5 | 2024-08-13 | Windows Deployment Services Remote Code Execution Vulnerability |
CVE-2024-38137 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38136 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38107 | High | 7.8 | 2024-08-13 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
CVE-2024-42232 | Critical | 9.8 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is… |
CVE-2024-7536 | High | 8.8 | 2024-08-06 | Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2024-7533 | High | 8.8 | 2024-08-06 | Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2024-7000 | High | 8.8 | 2024-08-06 | Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially e… |
CVE-2024-6998 | High | 8.8 | 2024-08-06 | Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to po… |
CVE-2024-6997 | High | 8.8 | 2024-08-06 | Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially… |
CVE-2024-6991 | High | 8.8 | 2024-08-06 | Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-6989 | High | 8.8 | 2024-08-06 | Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-6988 | High | 8.8 | 2024-08-06 | Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-7530 | High | 8.8 | 2024-08-06 | Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129. |
CVE-2024-7528 | High | 8.8 | 2024-08-06 | Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Th… |
CVE-2024-7527 | High | 8.8 | 2024-08-06 | Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ES… |
CVE-2024-33034 | High | 8.4 | 2024-08-05 | Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at t… |
CVE-2024-33028 | High | 8.4 | 2024-08-05 | Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released. |
CVE-2024-33023 | High | 8.4 | 2024-08-05 | Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events. |
CVE-2024-33010 | High | 7.5 | 2024-08-05 | Transient DOS while parsing fragments of MBSSID IE from beacon frame. |
CVE-2024-23384 | High | 8.4 | 2024-08-05 | Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker. |
CVE-2024-23383 | High | 8.4 | 2024-08-05 | Memory corruption when kernel driver attempts to trigger hardware fences. |
CVE-2024-23382 | High | 8.4 | 2024-08-05 | Memory corruption while processing graphics kernel driver request to create DMA fence. |
CVE-2024-23381 | High | 8.4 | 2024-08-05 | Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU. |
CVE-2024-4607 | High | 7.8 | 2024-08-05 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2024-2937 | High | 7.8 | 2024-08-05 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2024-41965 | Medium | 4.2 | 2024-08-01 | Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do w… |
CVE-2024-42112 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the share… |
CVE-2024-42108 | Critical | 9.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitch_poll() The use-after-free is actually in rs… |
CVE-2024-42105 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issues related… |
CVE-2024-42104 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: add missing check for inode numbers on directory entries Syzbot reported that mou… |
CVE-2024-40829 | Medium | 4.6 | 2024-07-29 | The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6… |
CVE-2024-40782 | Medium | 6.5 | 2024-07-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17… |
CVE-2024-40776 | Medium | 4.3 | 2024-07-29 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17… |
CVE-2024-42075 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix remap of arena. The bpf arena logic didn't account for mremap operation. Add a r… |
CVE-2024-42073 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems The following two s… |
CVE-2024-41096 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following UAF: BUG: KFENCE… |
CVE-2024-41092 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically repo… |
CVE-2024-41074 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id < 0 in copen If copen is maliciously calle… |
CVE-2024-41070 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Al reported a poss… |
CVE-2024-41069 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Fix references to freed memory Most users after parsing a topology file… |
CVE-2024-41058 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() We got the following iss… |
CVE-2024-41057 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() We got the following… |
CVE-2024-41051 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemand_object_worker to finish when dropping object When queuing o… |
CVE-2024-41050 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of msg_id to avoid reuse Reusing the msg_id after a malicio… |
CVE-2024-41049 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN U… |
CVE-2024-41045 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Defer work in bpf_timer_cancel_and_free Currently, the same case as previous patch (… |
CVE-2024-41040 | Critical | 9.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN… |
CVE-2024-39672 | High | 8.4 | 2024-07-25 | Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. |
CVE-2024-41012 | High | 7.8 | 2024-07-23 | In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() race… |
CVE-2024-41010 | High | 7.8 | 2024-07-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcx_entry Pedro Pinto and later independently also Hyunwoo… |
CVE-2024-3171 | High | 8.8 | 2024-07-16 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… |
CVE-2024-3170 | High | 8.8 | 2024-07-16 | Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-3169 | High | 8.8 | 2024-07-16 | Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-3168 | High | 8.8 | 2024-07-16 | Use after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2023-7010 | High | 8.8 | 2024-07-16 | Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-6777 | Medium | 6.5 | 2024-07-16 | Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2024-6776 | High | 8.8 | 2024-07-16 | Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-6775 | High | 8.8 | 2024-07-16 | Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… |
CVE-2024-6774 | High | 8.8 | 2024-07-16 | Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to p… |
CVE-2022-48861 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vp_vdpa_remove When vp_vdpa driver is unbind, vp_vdpa is free… |
CVE-2022-48858 | High | 7.0 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a… |
CVE-2022-48857 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100_send_complete Syzbot reported UAF in port100_… |
CVE-2022-48854 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: arc_emac: Fix use after free in arc_mdio_probe() If bus->state is equal to MDIOBUS_A… |
CVE-2022-48851 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdm_lte_rx() The netif_rx_ni() function frees the… |
CVE-2022-48844 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed before freeing… |
CVE-2022-48838 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver The syzbot fuzzer foun… |
CVE-2022-48822 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: f_fs: Fix use-after-free for epfile Consider a case where ffs_func_eps_disable is ca… |
CVE-2022-48821 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput() on failed usercopy If the copy back to userland fails… |
CVE-2022-48801 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL If we fail to cop… |
CVE-2022-48796 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use aft… |
CVE-2022-48792 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task Currently a use-after-free… |
CVE-2022-48791 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sas_task Currently a use-after-free may… |
CVE-2022-48790 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix a possible use-after-free in controller reset during load Unlike .queue_rq, in… |
CVE-2022-48789 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix possible use-after-free in transport error_recovery work While nvme_tcp_sub… |
CVE-2022-48788 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work While nvme_rdma_s… |
CVE-2022-48787 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all (or, presumably, all of the… |
CVE-2022-48783 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_… |
CVE-2022-48782 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warnin… |
CVE-2022-48779 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will… |
CVE-2023-52885 | High | 8.1 | 2024-07-14 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() After the listener svc_sock is freed, and… |
CVE-2023-41093 | Low | 3.1 | 2024-07-12 | Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of… |
CVE-2024-40989 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a… |
CVE-2024-40958 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t: ad… |
CVE-2024-40956 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_e… |