CWE-416 · Use After Free (page 36)
Page 36 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21334 | High | 7.8 | 2025-01-14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
CVE-2025-21315 | High | 7.8 | 2025-01-14 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
CVE-2025-21307 | Critical | 9.8 | 2025-01-14 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
CVE-2025-21304 | High | 7.8 | 2025-01-14 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2025-21298 | Critical | 9.8 | 2025-01-14 | Windows OLE Remote Code Execution Vulnerability |
CVE-2025-21297 | High | 8.1 | 2025-01-14 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2025-21296 | High | 7.5 | 2025-01-14 | BranchCache Remote Code Execution Vulnerability |
CVE-2025-21295 | High | 8.1 | 2025-01-14 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
CVE-2025-21281 | High | 7.8 | 2025-01-14 | Microsoft COM for Windows Elevation of Privilege Vulnerability |
CVE-2025-21224 | High | 8.1 | 2025-01-14 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2024-57875 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk->conv_zones_bitmap Ensure that a disk revalidation changing the c… |
CVE-2024-57849 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling trigg… |
CVE-2024-57798 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While recei… |
CVE-2024-50051 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module which wil… |
CVE-2024-41149 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse `hctx` not removed from cpuhp callback list If the 'hctx' isn't rem… |
CVE-2024-56772 | High | 7.8 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_suite() In kunit_debugfs_create_suite()… |
CVE-2023-35685 | High | 7.8 | 2025-01-08 | In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2024-56434 | Medium | 4.4 | 2025-01-08 | UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device. |
CVE-2025-0240 | Medium | 4.0 | 2025-01-07 | Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability w… |
CVE-2025-0238 | Medium | 5.3 | 2025-01-07 | Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability… |
CVE-2024-54030 | Medium | 4.4 | 2025-01-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free. |
CVE-2024-46981 | High | 7.0 | 2025-01-06 | Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage colle… |
CVE-2024-56765 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close() callback in vas_vm_ops struct The mapping VMA address is… |
CVE-2024-56764 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_disk() fails Inside ublk_abort_requests(), g… |
CVE-2024-56759 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tr… |
CVE-2024-45553 | High | 7.8 | 2025-01-06 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it… |
CVE-2024-33059 | Medium | 6.7 | 2025-01-06 | Memory corruption while processing frame command IOCTL calls. |
CVE-2024-33055 | Medium | 6.7 | 2025-01-06 | Memory corruption while invoking IOCTL calls to unmap the DMA buffers. |
CVE-2024-56693 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module initialization succeeds My colleague Wupe… |
CVE-2024-56678 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() can be calle… |
CVE-2024-46973 | High | 7.8 | 2024-12-28 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. |
CVE-2024-56675 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use bpf_prog_… |
CVE-2024-56672 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcg_unpin_online() blkcg_unpin_online() walks up the blkcg hiera… |
CVE-2024-56669 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cac… |
CVE-2024-56664 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket… |
CVE-2024-56658 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free… |
CVE-2024-56653 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump hci_devcd_append may lead to the re… |
CVE-2024-56652 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Remove register pool That pool implementation doesn't really work: if the… |
CVE-2024-56651 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can… |
CVE-2024-56642 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). syzkaller reported a use-a… |
CVE-2024-56640 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free i… |
CVE-2024-56635 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in default_opersta… |
CVE-2024-56631 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug in sg_rel… |
CVE-2024-56623 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after free on unload System crash is observed with stack trace war… |
CVE-2024-56619 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() Syzbot reported t… |
CVE-2024-56606 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_d… |
CVE-2024-56605 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() bt_soc… |
CVE-2024-56604 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() bt_sock_alloc… |
CVE-2024-56603 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_create() fre… |
CVE-2024-56602 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data… |
CVE-2024-56601 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches… |
CVE-2024-56600 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attache… |
CVE-2024-56582 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_endio() Shinichiro reported the following… |
CVE-2024-56581 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfs_ref_tree_mod() af… |
CVE-2024-56561 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() pci_epc_destroy() invokes p… |
CVE-2024-56558 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: make sure exp active before svc_export_show The function `e_show` was called with p… |
CVE-2024-56556 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binder_add_freeze_work() In binder_add_freeze_work() we iterate o… |
CVE-2024-56554 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix freeze UAF in binder_release_work() When a binder reference is cleaned up, an… |
CVE-2024-56551 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free [ +0.000021] BUG: KASAN: slab-use-after-free in dr… |
CVE-2024-56541 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() During ath12k module removal… |
CVE-2024-56538 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_kms: Unplug DRM device before removal Prevent userspace accesses to the DRM d… |
CVE-2024-53239 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release th… |
CVE-2024-53237 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix use-after-free in device_for_each_child() Syzbot has reported the followin… |
CVE-2024-53232 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a P… |
CVE-2024-53227 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfad_im_module_exit() BUG: KASAN: slab-use-after-free in… |
CVE-2024-53218 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fs_stop_gc_thread In my test case, concurrent calls to f2f… |
CVE-2024-53216 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference for `cache_head` can… |
CVE-2024-53208 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync This fixes the followin… |
CVE-2024-53206 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_… |
CVE-2024-53194 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot->bus on hot remove Dennis reports a boot crash on recent… |
CVE-2024-53186 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB req… |
CVE-2024-53185 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_setkey() Neither SMB3.0 or SMB3.02 support… |
CVE-2024-53182 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" This rever… |
CVE-2024-53179 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in… |
CVE-2024-53177 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir error paths If open_cached_dir() encou… |
CVE-2024-53174 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function `c_show` was called w… |
CVE-2024-53173 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that… |
CVE-2024-53171 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit After an insertion in T… |
CVE-2024-53170 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not c… |
CVE-2024-53168 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-use-after-f… |
CVE-2024-53166 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove fre… |
CVE-2024-53165 | High | 7.4 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for… |
CVE-2024-12175 | High | 7.8 | 2024-12-19 | Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force th… |
CVE-2021-32589 | High | 8.1 | 2024-12-19 | A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6… |
CVE-2022-44520 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44519 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44518 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44514 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2024-12694 | High | 8.8 | 2024-12-18 | Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-47040 | High | 7.8 | 2024-12-18 | There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User… |
CVE-2024-49576 | High | 8.8 | 2024-12-18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a… |
CVE-2024-47810 | High | 8.8 | 2024-12-18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious P… |
CVE-2024-47892 | High | 7.8 | 2024-12-13 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. |
CVE-2024-46971 | High | 7.8 | 2024-12-13 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. |
CVE-2024-49142 | High | 7.8 | 2024-12-12 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2024-49132 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49128 | High | 8.1 | 2024-12-12 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2024-49127 | High | 8.1 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49126 | High | 8.1 | 2024-12-12 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
CVE-2024-49122 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |