CWE-416 · Use After Free (page 34)
Page 34 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-24044 | High | 7.8 | 2025-03-11 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2025-23402 | High | 7.8 | 2025-03-11 | A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009)… |
CVE-2025-2136 | High | 8.8 | 2025-03-10 | Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-12837 | High | 7.8 | 2025-03-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. |
CVE-2024-58083 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the targ… |
CVE-2024-58072 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update heade… |
CVE-2024-58060 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing … |
CVE-2025-1916 | High | 8.8 | 2025-03-05 | Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2025-1931 | High | 7.5 | 2025-03-04 | It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerabil… |
CVE-2025-1930 | High | 8.8 | 2025-03-04 | On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led t… |
CVE-2025-24301 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-23414 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-23409 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-20626 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-20091 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-20081 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can b… |
CVE-2025-21424 | High | 7.8 | 2025-03-03 | Memory corruption while calling the NPU driver APIs concurrently. |
CVE-2024-53023 | High | 7.8 | 2025-03-03 | Memory corruption may occur while accessing a variable during extended back to back tests. |
CVE-2024-45580 | High | 7.8 | 2025-03-03 | Memory corruption while handling multuple IOCTL calls from userspace for remote invocation. |
CVE-2024-43062 | High | 7.8 | 2025-03-03 | Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization. |
CVE-2024-43061 | High | 7.8 | 2025-03-03 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive. |
CVE-2024-43059 | High | 7.8 | 2025-03-03 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
CVE-2024-43057 | High | 7.8 | 2025-03-03 | Memory corruption while processing command in Glink linux. |
CVE-2025-23115 | Critical | 9.0 | 2025-03-01 | A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras man… |
CVE-2025-21812 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev->ax25_ptr syzbot found a lockdep issue [1]. We should remove ax25… |
CVE-2025-21811 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active references nilfs_lookup_dirty_data_buffe… |
CVE-2024-58034 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() As… |
CVE-2025-21797 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The cancel_delayed_… |
CVE-2025-21796 | Critical | 9.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl… |
CVE-2025-21791 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU bein… |
CVE-2025-21786 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer from the pool The commit 68f83057b913(… |
CVE-2025-21764 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RT… |
CVE-2025-21763 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without… |
CVE-2025-21762 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protec… |
CVE-2025-21761 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() ca… |
CVE-2025-21760 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without R… |
CVE-2025-21759 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTN… |
CVE-2025-21756 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes… |
CVE-2025-21753 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are tryi… |
CVE-2025-21751 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, change error flow on matcher disconnect Currently, when firmware failure o… |
CVE-2025-21739 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devm_blk_crypto_profil… |
CVE-2024-58013 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes… |
CVE-2024-58002 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a poi… |
CVE-2024-54458 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any is… |
CVE-2024-49570 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TP_printk UAF The commit afd2627f727b ("tracing: Check "%… |
CVE-2025-21731 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: … |
CVE-2025-21729 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion The rtwdev->scanning… |
CVE-2025-21727 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-us… |
CVE-2025-21726 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF fo… |
CVE-2025-21722 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect bu… |
CVE-2025-21718 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinl… |
CVE-2025-21715 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be use… |
CVE-2025-21714 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr des… |
CVE-2024-57995 | High | 8.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() In ath12k_ma… |
CVE-2024-57984 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition In dw_i3c_commo… |
CVE-2024-57979 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-a… |
CVE-2022-49724 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to free_irq() to fix this… |
CVE-2022-49711 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() In fsl_mc_bus_remove()… |
CVE-2022-49700 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slab_alloc_node() a… |
CVE-2022-49696 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free Read in tipc_named_reinit syzbot found the following issue on: =… |
CVE-2022-49695 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igb_clean_tx_ring Fix the following use-after-free bug… |
CVE-2022-49694 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: block: disable the elevator int del_gendisk The elevator is only used for file system req… |
CVE-2022-49685 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix use-after-free on remove Ensure that the irq_work has completed… |
CVE-2022-49669 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race on unaccepted mptcp sockets When the listener socket owning the relevant… |
CVE-2022-49667 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free after 802.3ad slave unbind commit 0622cab0341c ("bonding… |
CVE-2022-49651 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: srcu: Tighten cleanup_srcu_struct() GP checks Currently, cleanup_srcu_struct() checks for… |
CVE-2022-49647 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading css_sets for migration Each cset (css_… |
CVE-2022-49626 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix use after free when disabling sriov Use after free is detected by kfence when di… |
CVE-2022-49622 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid skb access on nf_stolen When verdict is NF_STOLEN, the skb mi… |
CVE-2022-49535 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfc_i… |
CVE-2022-49524 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885_initdev() When the driver fails to… |
CVE-2022-49505 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev->rfkill to prevent UAF Commit 3e3b5dfcd16a ("NFC: reorder the logic… |
CVE-2022-49501 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usbnet: Run unregister_netdev() before unbind() again Commit 2c9d6c2b871d ("usbnet: run u… |
CVE-2022-49493 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix errorenous cleanup order There is a logic error when removing rt5645 de… |
CVE-2022-49489 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm run… |
CVE-2022-49479 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race… |
CVE-2022-49474 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout Connecting the sa… |
CVE-2022-49470 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event We should not access skb… |
CVE-2022-49465 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: blk-throttle: Set BIO_THROTTLED when bio has been throttled 1.In current process, all bio… |
CVE-2022-49464 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix buffer copy overflow of ztailpacking feature I got some KASAN report as below… |
CVE-2022-49426 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64_mm_context_put() wit… |
CVE-2022-49419 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup Commit b3c9a924aab6… |
CVE-2022-49416 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211_vif_use_reserved_context(… |
CVE-2022-49413 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a diffe… |
CVE-2022-49412 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq… |
CVE-2022-49411 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios queued into BFQ IO… |
CVE-2022-49390 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real… |
CVE-2022-49388 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_create_volume: Fix use-after-free when volume creation failed There is an use-af… |
CVE-2022-49385 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driv… |
CVE-2022-49377 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx blk_mq_run_hw_queues() could be run wh… |
CVE-2022-49362 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf… |
CVE-2022-49359 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Job should reference MMU not file_priv For a while now it's been allowed fo… |
CVE-2022-49349 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_rename_dir_prepare We got issue as follows: EXT4-fs (loo… |
CVE-2022-49328 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASA… |
CVE-2022-49291 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls Currently we have neith… |
CVE-2022-49288 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent prealloc proc writes We have no protection against… |
CVE-2022-49287 | High | 7.0 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tpm: fix reference counting for struct tpm_chip The following sequence of operations resu… |
CVE-2022-49275 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone s… |
CVE-2022-49270 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dm: fix use-after-free in dm_cleanup_zoned_dev() dm_cleanup_zoned_dev() uses queue, so it… |
CVE-2022-49258 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - Fix use after free in cc_cipher_exit() kfree_sensitive(ctx_p->user.key) w… |