CWE-416 · Use After Free (page 40)
Page 40 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26656 | High | 7.8 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpu_ge… |
CVE-2024-22180 | Low | 3.3 | 2024-04-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free. |
CVE-2024-22098 | Medium | 6.5 | 2024-04-02 | in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |
CVE-2024-21472 | High | 8.4 | 2024-04-01 | Memory corruption in Kernel while handling GPU operations. |
CVE-2024-21468 | High | 8.4 | 2024-04-01 | Memory corruption when there is failed unmap operation in GPU. |
CVE-2024-26654 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer cou… |
CVE-2023-52629 | High | 8.4 | 2024-03-29 | In the Linux kernel, the following vulnerability has been resolved: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code… |
CVE-2023-42950 | High | 8.8 | 2024-03-28 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, ma… |
CVE-2023-42892 | High | 7.8 | 2024-03-28 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A… |
CVE-2024-2886 | High | 7.5 | 2024-03-26 | Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromiu… |
CVE-2024-2885 | High | 8.8 | 2024-03-26 | Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-2883 | High | 8.8 | 2024-03-26 | Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-21918 | High | 7.8 | 2024-03-26 | A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the sof… |
CVE-2021-47162 | Critical | 9.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a good idea to append th… |
CVE-2021-47142 | High | 7.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg to NULL. Hit panic b… |
CVE-2024-30161 | Medium | 6.5 | 2024-03-24 | In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are… |
CVE-2024-1848 | High | 7.8 | 2024-03-22 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-27934 | High | 8.4 | 2024-03-21 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use of inherently unsafe `*const c_void` and… |
CVE-2024-2627 | High | 8.8 | 2024-03-20 | Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-2612 | High | 8.1 | 2024-03-19 | If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code… |
CVE-2024-20752 | High | 7.8 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2021-47131 | High | 8.1 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up When a netdev with acti… |
CVE-2021-47123 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout on io_lin… |
CVE-2021-47118 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` During boot, kernel_init_freeable() ini… |
CVE-2021-47113 | High | 7.1 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: abort in rename_exchange if we fail to insert the second ref Error injection stres… |
CVE-2021-47111 | High | 8.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: xen-netback: take a reference to the RX task thread Do this in order to prevent the task… |
CVE-2024-26630 | High | 7.1 | 2024-03-13 | In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix folio read-after-free in cache walk In cachestat, we access the folio… |
CVE-2024-2400 | High | 8.8 | 2024-03-13 | Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2024-23300 | High | 7.8 | 2024-03-12 | A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead… |
CVE-2024-26182 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21443 | High | 7.3 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21439 | High | 7.0 | 2024-03-12 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-21437 | High | 7.8 | 2024-03-12 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-21426 | High | 7.8 | 2024-03-12 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-21407 | High | 8.1 | 2024-03-12 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-21334 | Critical | 9.8 | 2024-03-12 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
CVE-2024-27213 | High | 8.4 | 2024-03-11 | In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privileg… |
CVE-2024-27205 | High | 8.4 | 2024-03-11 | there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2024-25985 | High | 8.4 | 2024-03-11 | In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-26619 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order of kfree calls to resolve use-after-fr… |
CVE-2024-26616 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned [BUG] There is a… |
CVE-2023-52491 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_… |
CVE-2024-27308 | High | 7.5 | 2024-03-06 | Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes… |
CVE-2024-2176 | High | 8.8 | 2024-03-06 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-50716 | Critical | 9.6 | 2024-03-06 | eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13… |
CVE-2024-26625 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: llc: call sock_orphan() at release time syzbot reported an interesting trace [1] caused b… |
CVE-2023-52600 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object i… |
CVE-2023-52584 | Low | 3.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif driver data that contains the clocks is… |
CVE-2024-22253 | Critical | 9.3 | 2024-03-05 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges… |
CVE-2024-22252 | Critical | 9.3 | 2024-03-05 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges… |
CVE-2024-27929 | High | 7.1 | 2024-03-05 | ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage() function of PngDecoderCore… |
CVE-2024-26333 | Medium | 5.5 | 2024-03-05 | swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c. |
CVE-2024-20833 | Medium | 4.1 | 2024-03-05 | Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause… |
CVE-2021-47106 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() We need to use lis… |
CVE-2021-47103 | Critical | 9.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around earl… |
CVE-2021-47100 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module Hi, When testing install… |
CVE-2021-47088 | High | 7.0 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with kdamond_lock DAMON debugfs interface it… |
CVE-2024-0155 | High | 7.0 | 2024-03-04 | Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulner… |
CVE-2023-6241 | High | 7.0 | 2024-03-04 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2023-43552 | Critical | 9.8 | 2024-03-04 | Memory corruption while processing MBSSID beacon containing several subelement IE. |
CVE-2023-43547 | High | 8.4 | 2024-03-04 | Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
CVE-2023-43546 | High | 8.4 | 2024-03-04 | Memory corruption while invoking HGSL IOCTL context create. |
CVE-2023-6143 | High | 8.4 | 2024-03-04 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2024-26622 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates… |
CVE-2023-46708 | Medium | 4.3 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |
CVE-2023-52576 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code callin… |
CVE-2023-52572 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() There is a UAF when xfstests on cifs: BUG… |
CVE-2023-52566 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache… |
CVE-2023-52530 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by i… |
CVE-2023-52515 | Critical | 9.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has call… |
CVE-2023-52510 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: Fix a potential UAF in ca8210_probe If of_clk_add_provider() fails in… |
CVE-2023-52509 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_work() The ravb_stop() should call canc… |
CVE-2023-52503 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session There is a potentia… |
CVE-2023-52502 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a… |
CVE-2021-47081 | High | 7.8 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory Our code a… |
CVE-2021-47078 | High | 7.8 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed rxe_qp_do_cleanup() relies on valid poin… |
CVE-2021-47068 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect Commits 8a4cd82d ("nfc: fix refcount l… |
CVE-2021-47063 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drm_connector_clea… |
CVE-2021-47061 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU If allocating a… |
CVE-2021-47058 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: regmap: set debugfs_name to NULL after it is freed There is a upstream commit cffa4b2122f… |
CVE-2021-46959 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devm_spi_alloc_* We can't rely on the contents of the devres… |
CVE-2024-20765 | High | 7.8 | 2024-02-29 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2023-52483 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current route lookups (mctp_ro… |
CVE-2023-52479 | High | 8.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo. |
CVE-2023-52475 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use… |
CVE-2024-27284 | High | 7.5 | 2024-02-29 | cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to t… |
CVE-2024-23807 | Critical | 9.8 | 2024-02-29 | The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are reco… |
CVE-2023-51779 | High | 7.0 | 2024-02-29 | bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition. |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2021-47049 | High | 8.4 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to… |
CVE-2021-47048 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op->addr… |
CVE-2021-47026 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: destroy sysfs after removing session from active list A session can be rem… |
CVE-2021-47017 | High | 8.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix a use after free in ath10k_htc_send_bundle In ath10k_htc_send_bundle, the bun… |
CVE-2021-47013 | Critical | 9.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send… |
CVE-2021-47012 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix a use after free in siw_alloc_mr Our code analyzer reported a UAF. In siw_… |
CVE-2021-46999 | Critical | 9.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: sctp: do asoc update earlier in sctp_sf_do_dupcook_a There's a panic that occurs in a few… |
CVE-2021-46998 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit In enic_hard_start_xmit… |
CVE-2021-46991 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_client_del_i… |
CVE-2021-46988 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON Consider the following sequence o… |
CVE-2021-46986 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Free gadget structure only after freeing endpoints As part of commit e… |