CWE-416 · Use After Free (page 39)
Page 39 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47701 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up… |
CVE-2024-47696 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee242… |
CVE-2024-47691 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() syzbot reports a f2fs bug as b… |
CVE-2024-47676 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in hugetlb_fau… |
CVE-2024-47675 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_… |
CVE-2024-49023 | Medium | 5.9 | 2024-10-18 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-3187 | Medium | 5.9 | 2024-10-17 | This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not… |
CVE-2024-9961 | High | 8.8 | 2024-10-15 | Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gesture… |
CVE-2024-9960 | High | 7.5 | 2024-10-15 | Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-9959 | High | 8.8 | 2024-10-15 | Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2024-9957 | High | 8.8 | 2024-10-15 | Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
CVE-2024-9955 | High | 8.8 | 2024-10-15 | Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-9954 | High | 8.8 | 2024-10-15 | Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-9979 | Medium | 5.3 | 2024-10-15 | A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak… |
CVE-2024-43701 | High | 7.8 | 2024-10-14 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. |
CVE-2024-8376 | High | 7.5 | 2024-10-11 | In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of… |
CVE-2024-47666 | Medium | 5.5 | 2024-10-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_control() po… |
CVE-2024-45138 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-9680 | Critical | 9.8 | 2024-10-09 | An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner… |
CVE-2024-47418 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47415 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47414 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47413 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47412 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-45146 | High | 7.8 | 2024-10-09 | Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current… |
CVE-2024-43599 | High | 8.8 | 2024-10-08 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-43582 | High | 8.1 | 2024-10-08 | Remote Desktop Protocol Server Remote Code Execution Vulnerability |
CVE-2024-43574 | High | 8.3 | 2024-10-08 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-43570 | Medium | 6.4 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-43556 | High | 7.8 | 2024-10-08 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-43552 | High | 7.3 | 2024-10-08 | Windows Shell Remote Code Execution Vulnerability |
CVE-2024-43535 | High | 7.0 | 2024-10-08 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-43533 | High | 8.8 | 2024-10-08 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-43509 | High | 7.8 | 2024-10-08 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-43504 | High | 7.8 | 2024-10-08 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38229 | High | 8.1 | 2024-10-08 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-8422 | High | 7.8 | 2024-10-08 | CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when applicat… |
CVE-2024-39831 | Medium | 4.4 | 2024-10-08 | in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free. |
CVE-2024-47814 | Low | 3.9 | 2024-10-07 | Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto c… |
CVE-2024-44068 | High | 8.1 | 2024-10-07 | An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. A Use-After-Free… |
CVE-2024-43047 | High | 7.8 | 2024-10-07 | Memory corruption while maintaining memory maps of HLOS memory. |
CVE-2024-38399 | High | 8.4 | 2024-10-07 | Memory corruption while processing user packets to generate page faults. |
CVE-2024-33069 | High | 7.5 | 2024-10-07 | Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. |
CVE-2024-23376 | Medium | 6.7 | 2024-10-07 | Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. |
CVE-2024-23370 | Medium | 6.7 | 2024-10-07 | Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the sam… |
CVE-2024-0124 | Low | 3.3 | 2024-10-03 | NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by ru… |
CVE-2024-28888 | High | 8.8 | 2024-10-02 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a mal… |
CVE-2024-7675 | High | 7.8 | 2024-09-30 | A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerabi… |
CVE-2024-23923 | High | 8.8 | 2024-09-28 | Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… |
CVE-2024-46858 | High | 8.1 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_… |
CVE-2024-46849 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buffer 'card->dai_link' is reallocated in 'me… |
CVE-2024-46845 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exists The timerlat tracer can use user s… |
CVE-2024-46842 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info The MBX_TIMEOUT return code is n… |
CVE-2024-46831 | High | 8.4 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-fr… |
CVE-2024-9120 | High | 8.8 | 2024-09-25 | Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-38023 | High | 8.8 | 2024-09-23 | Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-8375 | High | 7.8 | 2024-09-19 | There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a… |
CVE-2024-46800 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inne… |
CVE-2024-46798 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel with the following e… |
CVE-2024-46796 | Critical | 9.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_compound_op() is ca… |
CVE-2024-46786 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fscache_cook… |
CVE-2024-46782 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_… |
CVE-2024-46781 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a… |
CVE-2024-46762 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneou… |
CVE-2024-46746 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't ca… |
CVE-2024-46740 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied indiv… |
CVE-2024-46738 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a… |
CVE-2024-46716 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor Remove list_… |
CVE-2024-8947 | Medium | 5.6 | 2024-09-17 | A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/ob… |
CVE-2024-43758 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2024-41869 | High | 7.8 | 2024-09-13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39385 | Medium | 5.5 | 2024-09-13 | Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-46696 | Critical | 9.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference… |
CVE-2024-46687 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() [BUG] There i… |
CVE-2024-46683 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of the queue, therefore i… |
CVE-2024-46674 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe functio… |
CVE-2024-45016 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() intr… |
CVE-2024-45013 | Critical | 9.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctrl() Commit 4733b65d82bd ("nvme: start… |
CVE-2024-8639 | High | 8.8 | 2024-09-11 | Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2024-8638 | High | 8.8 | 2024-09-11 | Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
CVE-2024-8637 | High | 8.8 | 2024-09-11 | Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a craft… |
CVE-2024-8636 | High | 8.8 | 2024-09-11 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-23716 | High | 7.0 | 2024-09-11 | In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the… |
CVE-2024-43491 | Critical | 9.8 | 2024-09-10 | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, v… |
CVE-2024-43465 | High | 7.8 | 2024-09-10 | Microsoft Excel Elevation of Privilege Vulnerability |
CVE-2024-43463 | High | 7.8 | 2024-09-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-38259 | High | 8.8 | 2024-09-10 | Microsoft Management Console Remote Code Execution Vulnerability |
CVE-2024-38253 | High | 7.8 | 2024-09-10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-38252 | High | 7.8 | 2024-09-10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-38249 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38248 | High | 7.0 | 2024-09-10 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-38235 | Medium | 6.5 | 2024-09-10 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-38119 | High | 7.5 | 2024-09-10 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
CVE-2024-26186 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-31960 | High | 7.8 | 2024-09-10 | An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after… |
CVE-2024-8394 | Medium | 6.5 | 2024-09-06 | When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vuln… |
CVE-2024-45107 | Medium | 5.5 | 2024-09-05 | Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to di… |
CVE-2024-45063 | High | 8.8 | 2024-09-05 | The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running… |
CVE-2024-43102 | Critical | 10.0 | 2024-09-05 | Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference c… |
CVE-2024-44998 | Critical | 9.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after ca… |