CWE-416 · Use After Free (page 42)
Page 42 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20683 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20681 | High | 7.8 | 2024-01-09 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
CVE-2024-20655 | Medium | 6.6 | 2024-01-09 | Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
CVE-2022-2602 | Medium | 5.3 | 2024-01-08 | io_uring UAF, Unix SCM garbage collection |
CVE-2022-2588 | Medium | 5.3 | 2024-01-08 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handl… |
CVE-2022-2586 | Medium | 5.3 | 2024-01-08 | It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. |
CVE-2022-2585 | Medium | 5.3 | 2024-01-08 | It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free. |
CVE-2023-37578 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37577 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37576 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37575 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37574 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37573 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-5091 | Medium | 5.5 | 2024-01-08 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access… |
CVE-2024-22088 | Critical | 9.8 | 2024-01-05 | Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled. |
CVE-2023-6270 | High | 7.0 | 2024-01-04 | A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`… |
CVE-2024-0225 | High | 8.8 | 2024-01-04 | Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-0224 | High | 8.8 | 2024-01-04 | Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-0222 | High | 8.8 | 2024-01-04 | Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap… |
CVE-2024-0217 | Low | 3.3 | 2024-01-03 | A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memor… |
CVE-2023-49554 | Medium | 5.5 | 2024-01-03 | Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs… |
CVE-2024-0193 | High | 7.8 | 2024-01-02 | A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, th… |
CVE-2023-49142 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer. |
CVE-2023-49135 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer. |
CVE-2023-48360 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer. |
CVE-2023-47857 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer. |
CVE-2023-43514 | High | 8.4 | 2024-01-02 | Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
CVE-2023-33120 | High | 7.8 | 2024-01-02 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
CVE-2023-33118 | High | 7.8 | 2024-01-02 | Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
CVE-2023-33117 | High | 7.8 | 2024-01-02 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
CVE-2023-33114 | High | 8.4 | 2024-01-02 | Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
CVE-2023-33108 | High | 8.4 | 2024-01-02 | Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
CVE-2023-33094 | High | 8.4 | 2024-01-02 | Memory corruption while running VK synchronization with KASAN enabled. |
CVE-2023-52266 | High | 7.5 | 2023-12-31 | ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this. |
CVE-2023-7152 | Medium | 5.5 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd… |
CVE-2023-6932 | High | 7.8 | 2023-12-19 | A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be expl… |
CVE-2023-6862 | High | 8.8 | 2023-12-19 | A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 1… |
CVE-2023-6859 | High | 8.8 | 2023-12-19 | A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Fi… |
CVE-2023-6817 | High | 7.8 | 2023-12-18 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_p… |
CVE-2023-6707 | High | 8.8 | 2023-12-14 | Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2023-6706 | High | 8.8 | 2023-12-14 | Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potenti… |
CVE-2023-6705 | High | 8.8 | 2023-12-14 | Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-6704 | High | 8.8 | 2023-12-14 | Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (… |
CVE-2023-6703 | High | 8.8 | 2023-12-14 | Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-48633 | High | 7.8 | 2023-12-13 | Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code e… |
CVE-2023-47075 | High | 7.8 | 2023-12-13 | Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code executi… |
CVE-2022-22942 | High | 7.8 | 2023-12-13 | The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the s… |
CVE-2023-35628 | High | 8.1 | 2023-12-12 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2023-46156 | High | 7.5 | 2023-12-12 | Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A res… |
CVE-2023-48414 | Medium | 6.7 | 2023-12-08 | In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System e… |
CVE-2023-35618 | Critical | 9.6 | 2023-12-07 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-46751 | High | 7.5 | 2023-12-06 | An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the applicatio… |
CVE-2023-6510 | High | 8.8 | 2023-12-06 | Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
CVE-2023-6509 | High | 8.8 | 2023-12-06 | Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction… |
CVE-2023-6508 | High | 8.8 | 2023-12-06 | Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-33063 | High | 7.8 | 2023-12-05 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
CVE-2023-22668 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space. |
CVE-2023-22383 | Medium | 6.7 | 2023-12-05 | Memory Corruption in camera while installing a fd for a particular DMA buffer. |
CVE-2023-49288 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to… |
CVE-2023-40088 | High | 8.8 | 2023-12-04 | In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead… |
CVE-2023-40084 | High | 7.8 | 2023-12-04 | In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2023-42722 | Medium | 6.7 | 2023-12-04 | In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-5427 | High | 7.8 | 2023-12-01 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2023-6351 | High | 8.8 | 2023-11-29 | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (C… |
CVE-2023-6350 | High | 8.8 | 2023-11-29 | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (C… |
CVE-2023-6347 | High | 8.8 | 2023-11-29 | Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2023-6346 | High | 8.8 | 2023-11-29 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2023-42365 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function. |
CVE-2023-42364 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function. |
CVE-2023-42363 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1. |
CVE-2023-38573 | High | 8.8 | 2023-11-27 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious PD… |
CVE-2023-32616 | High | 8.8 | 2023-11-27 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF d… |
CVE-2023-48706 | Low | 3.6 | 2023-11-22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using… |
CVE-2023-6207 | High | 8.8 | 2023-11-21 | Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5. |
CVE-2023-6205 | Medium | 6.5 | 2023-11-21 | It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability… |
CVE-2023-5341 | Medium | 6.2 | 2023-11-19 | A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. |
CVE-2023-48024 | Medium | 6.5 | 2023-11-17 | Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c |
CVE-2023-48231 | Low | 3.9 | 2023-11-16 | Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the a… |
CVE-2023-36008 | Medium | 6.6 | 2023-11-16 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-47055 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code executi… |
CVE-2023-44328 | Medium | 5.5 | 2023-11-16 | Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive m… |
CVE-2023-44372 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44371 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44367 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44361 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2023-44359 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44336 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-48011 | High | 7.8 | 2023-11-15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments… |
CVE-2023-6112 | High | 8.8 | 2023-11-15 | Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-5997 | High | 8.8 | 2023-11-15 | Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2023-26589 | Medium | 6.5 | 2023-11-14 | Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local acc… |
CVE-2023-20519 | Low | 3.3 | 2023-11-14 | A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent res… |
CVE-2023-36041 | High | 7.8 | 2023-11-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-6111 | High | 7.8 | 2023-11-14 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_t… |
CVE-2023-46850 | Critical | 9.8 | 2023-11-11 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a r… |
CVE-2023-39198 | High | 7.5 | 2023-11-09 | A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_crea… |
CVE-2023-6039 | Medium | 5.5 | 2023-11-09 | A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb/lan78xx in the Linux Kernel. This flaw… |
CVE-2023-4891 | Medium | 5.5 | 2023-11-08 | A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service. |
CVE-2023-46362 | Medium | 5.5 | 2023-11-08 | jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc. |
CVE-2023-5996 | High | 8.8 | 2023-11-08 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |