CWE-416 · Use After Free (page 37)
Page 37 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-49118 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49116 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49115 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49108 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49106 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49097 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49079 | High | 7.8 | 2024-12-12 | Input Method Editor (IME) Remote Code Execution Vulnerability |
CVE-2024-49074 | High | 7.8 | 2024-12-12 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-49069 | High | 7.8 | 2024-12-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-47834 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing… |
CVE-2024-12382 | High | 8.8 | 2024-12-12 | Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-53953 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-52997 | High | 7.8 | 2024-12-10 | Photoshop Desktop versions 26.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-49530 | High | 7.8 | 2024-12-10 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that co… |
CVE-2024-53143 | High | 7.8 | 2024-12-07 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is k… |
CVE-2024-38927 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38926 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38925 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38924 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38923 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38921 | Critical | 9.8 | 2024-12-06 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38920 | Critical | 9.1 | 2024-12-05 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… |
CVE-2024-38910 | High | 7.5 | 2024-12-05 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability… |
CVE-2024-11155 | High | 7.8 | 2024-12-05 | A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the sof… |
CVE-2018-9439 | Medium | 6.7 | 2024-12-05 | In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local escal… |
CVE-2024-53139 | High | 7.8 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix possible UAF in sctp_v6_available() A lockdep report [1] with CONFIG_PROVE_RCU_… |
CVE-2024-10074 | High | 8.8 | 2024-12-03 | in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free. |
CVE-2024-33053 | Medium | 6.7 | 2024-12-02 | Memory corruption when multiple threads try to unregister the CVP buffer at the same time. |
CVE-2024-33040 | Medium | 6.7 | 2024-12-02 | Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer rel… |
CVE-2024-53103 | High | 7.8 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is releas… |
CVE-2024-43703 | High | 8.1 | 2024-11-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the… |
CVE-2023-52922 | High | 7.8 | 2024-11-28 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x9… |
CVE-2024-42331 | Low | 3.3 | 2024-11-27 | In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequen… |
CVE-2024-42326 | Medium | 4.4 | 2024-11-27 | There was discovered a use after free bug in browser.c in the es_browser_get_variant function |
CVE-2018-11816 | High | 7.8 | 2024-11-26 | Crafted Binder Request Causes Heap UAF in MediaServer |
CVE-2017-18153 | High | 8.4 | 2024-11-26 | A race condition exists in a driver potentially leading to a use-after-free condition. |
CVE-2024-9255 | High | 7.8 | 2024-11-22 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-9254 | High | 8.8 | 2024-11-22 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-9252 | High | 7.8 | 2024-11-22 | Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on… |
CVE-2024-9251 | High | 7.8 | 2024-11-22 | Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information o… |
CVE-2024-9250 | High | 7.8 | 2024-11-22 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-9243 | High | 7.8 | 2024-11-22 | Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-7510 | High | 7.8 | 2024-11-22 | Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2024-9764 | High | 7.8 | 2024-11-22 | Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2024-9748 | High | 7.8 | 2024-11-22 | Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2024-9732 | High | 7.8 | 2024-11-22 | Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2024-9729 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9728 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9727 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9725 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9724 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9723 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9722 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9721 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9719 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9716 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9715 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9714 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-9713 | High | 7.8 | 2024-11-22 | Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-9712 | High | 7.8 | 2024-11-22 | Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2024-8821 | Medium | 5.5 | 2024-11-22 | PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2024-8818 | High | 7.8 | 2024-11-22 | PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2024-8816 | Medium | 5.5 | 2024-11-22 | PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2024-11570 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11545 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11525 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11521 | High | 7.8 | 2024-11-22 | IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-53095 | Critical | 9.8 | 2024-11-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report… |
CVE-2018-9483 | Medium | 6.5 | 2024-11-20 | In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2018-9428 | High | 7.8 | 2024-11-19 | In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code executio… |
CVE-2018-9417 | High | 7.8 | 2024-11-19 | In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with n… |
CVE-2018-9344 | High | 7.8 | 2024-11-19 | In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with… |
CVE-2024-53068 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() The scmi_dev->name is… |
CVE-2024-53057 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Qdis… |
CVE-2024-50293 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __smc_create() Thanks to commit 4bbd360a50… |
CVE-2024-50286 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create There is a race condition bet… |
CVE-2024-50283 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp ksmbd_user_session_put should be… |
CVE-2024-50280 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_O… |
CVE-2024-50274 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpf_get_link_ksettings When the device control plane is remo… |
CVE-2024-50269 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca ("usb: musb: sunx… |
CVE-2024-50267 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in debug printk The "dev_dbg(&urb->dev->dev… |
CVE-2024-50264 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopb… |
CVE-2023-52921 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() Since the gang_size check is outside of… |
CVE-2024-52568 | High | 7.8 | 2024-11-18 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2023-4679 | Medium | 5.5 | 2024-11-15 | A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38… |
CVE-2023-4134 | Medium | 5.5 | 2024-11-14 | A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rear… |
CVE-2024-40885 | Medium | 6.4 | 2024-11-13 | Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local acc… |
CVE-2024-34747 | High | 7.8 | 2024-11-13 | In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2024-4741 | High | 7.5 | 2024-11-13 | Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary… |
CVE-2024-11113 | High | 8.8 | 2024-11-12 | Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2024-11112 | High | 8.8 | 2024-11-12 | Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-49032 | High | 7.8 | 2024-11-12 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2024-49027 | High | 7.8 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-49021 | High | 7.8 | 2024-11-12 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2024-49016 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-49003 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-43642 | High | 7.5 | 2024-11-12 | Windows SMB Denial of Service Vulnerability |
CVE-2024-43625 | High | 8.1 | 2024-11-12 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
CVE-2024-43459 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-49526 | High | 7.8 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |