CWE-416 · Use After Free (page 37)
Page 37 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-47224 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: Make sure to free skb when it is completely used With the skb pointer pigg… |
CVE-2021-47222 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst refcnt when egressing The egress tunnel code uses dst_cl… |
CVE-2020-36788 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveau_bo_init() is backed by ttm… |
CVE-2024-35986 | High | 7.0 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered The power_sup… |
CVE-2024-35979 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1_write_request() r1_bio->bios[] is use… |
CVE-2024-35955 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module… |
CVE-2024-35932 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane->state->fb == state->fb Currently, when using non-blocking… |
CVE-2024-35921 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves t… |
CVE-2024-35887 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ax25: fix use-after-free bugs caused by ax25_ds_del_timer When the ax25 device is detachi… |
CVE-2024-35870 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reconnect_serv… |
CVE-2024-35869 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-… |
CVE-2024-35868 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_write() Skip sessions that are being te… |
CVE-2024-35867 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being tea… |
CVE-2024-35866 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teare… |
CVE-2024-35865 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are bei… |
CVE-2024-35864 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are bein… |
CVE-2024-35863 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in is_valid_oplock_break() Skip sessions that are being te… |
CVE-2024-35862 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_name_deleted() Skip sessions that are b… |
CVE-2024-35861 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Skip sessions that ar… |
CVE-2024-35855 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update The rule act… |
CVE-2024-35854 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash The rehash delayed wo… |
CVE-2024-35843 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler… |
CVE-2024-35836 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix pin dump crash for rebound module When a kernel module is unbound but the pin r… |
CVE-2024-35811 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach This is the candidate pat… |
CVE-2024-35801 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 ("x86/fpu: Update X… |
CVE-2024-35792 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out b… |
CVE-2024-35791 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() Do the cach… |
CVE-2024-35789 | High | 8.0 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station… |
CVE-2023-46691 | High | 7.9 | 2024-05-16 | Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2024-30275 | High | 7.8 | 2024-05-16 | Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-20792 | High | 7.8 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2024-4949 | Medium | 6.5 | 2024-05-15 | Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-4948 | Medium | 6.5 | 2024-05-15 | Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-34100 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34097 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34096 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34095 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34094 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-30284 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-4777 | High | 8.8 | 2024-05-14 | Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2024-4771 | High | 8.6 | 2024-05-14 | A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be levera… |
CVE-2024-4770 | High | 8.8 | 2024-05-14 | When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115… |
CVE-2024-4764 | Critical | 9.8 | 2024-05-14 | Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox < 126. |
CVE-2024-30049 | High | 7.8 | 2024-05-14 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-30035 | High | 7.8 | 2024-05-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-30032 | High | 7.8 | 2024-05-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-30031 | High | 7.8 | 2024-05-14 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2024-30028 | High | 7.8 | 2024-05-14 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30006 | High | 8.8 | 2024-05-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-22267 | Critical | 9.3 | 2024-05-14 | VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virt… |
CVE-2024-4855 | Low | 3.6 | 2024-05-14 | Use after free issue in editcap could cause denial of service via crafted capture file |
CVE-2024-4671 | Critical | 9.6 | 2024-05-14 | Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2024-32610 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted instruction pointer. |
CVE-2024-27398 | High | 8.0 | 2024-05-14 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is… |
CVE-2024-27397 | High | 7.8 | 2024-05-14 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp fiel… |
CVE-2024-27396 | High | 7.8 | 2024-05-14 | In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_… |
CVE-2024-27395 | High | 7.8 | 2024-05-14 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix Use-After-Free in ovs_ct_exit Since kfree_rcu, which is called in t… |
CVE-2024-27394 | High | 7.8 | 2024-05-14 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix Use-After-Free in tcp_ao_connect_init Since call_rcu, which is called in the hli… |
CVE-2023-5447 | Medium | 5.5 | 2024-05-14 | Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for… |
CVE-2023-40490 | High | 7.8 | 2024-05-07 | Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2022-43652 | Medium | 5.5 | 2024-05-07 | Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information… |
CVE-2022-43651 | High | 7.8 | 2024-05-07 | Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2021-34976 | Medium | 5.5 | 2024-05-07 | Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informa… |
CVE-2021-34975 | High | 7.8 | 2024-05-07 | Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2021-34974 | High | 7.8 | 2024-05-07 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2021-34973 | Medium | 5.5 | 2024-05-07 | Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informa… |
CVE-2021-34972 | Medium | 5.5 | 2024-05-07 | Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on… |
CVE-2021-34969 | Medium | 5.5 | 2024-05-07 | Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information o… |
CVE-2021-34968 | High | 7.8 | 2024-05-07 | Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2021-34967 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2021-34966 | High | 7.8 | 2024-05-07 | Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2021-34965 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2021-34964 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2021-34963 | High | 7.8 | 2024-05-07 | Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2021-34962 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2021-34961 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2021-34960 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2021-34959 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2021-34958 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2021-34957 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2021-34956 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2021-34955 | High | 7.8 | 2024-05-07 | Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2021-34954 | High | 7.8 | 2024-05-07 | Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2021-34952 | High | 7.8 | 2024-05-07 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2021-34948 | High | 7.8 | 2024-05-07 | Foxit PDF Reader Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2024-4558 | Critical | 9.6 | 2024-05-07 | Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-3759 | Medium | 6.5 | 2024-05-07 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free. |
CVE-2024-27217 | Medium | 6.5 | 2024-05-07 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. |
CVE-2024-20861 | Medium | 6.0 | 2024-05-07 | Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption. |
CVE-2024-23354 | High | 8.4 | 2024-05-06 | Memory corruption when the IOCTL call is interrupted by a signal. |
CVE-2024-21471 | High | 8.4 | 2024-05-06 | Memory corruption when IOMMU unmap of a GPU buffer fails in Linux. |
CVE-2023-43521 | Medium | 6.7 | 2024-05-06 | Memory corruption when multiple listeners are being registered with the same file descriptor. |
CVE-2023-49676 | Medium | 5.5 | 2024-05-06 | An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability. |
CVE-2022-48695 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-free warning which… |
CVE-2022-48697 | Critical | 9.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blkte… |
CVE-2022-48686 | Critical | 9.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop… |
CVE-2022-48674 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIG_SMP… |
CVE-2022-48670 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adev_release() When auxiliary_device_add() returns an er… |
CVE-2024-1395 | Medium | 6.7 | 2024-05-03 | Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing op… |
CVE-2024-1067 | High | 7.4 | 2024-05-03 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |