CWE-416 · Use After Free (page 42)
Page 42 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37007 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability… |
CVE-2024-37004 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability… |
CVE-2024-23158 | High | 7.8 | 2024-06-25 | A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. A malicio… |
CVE-2024-23142 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cau… |
CVE-2024-6293 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6292 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6291 | High | 8.8 | 2024-06-24 | Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-6290 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-38630 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger When the cpu5wdt mo… |
CVE-2024-38629 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of file_ida file_ida is allocated during c… |
CVE-2022-48771 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix stale file descriptors on failed usercopy A failing usercopy of the fence… |
CVE-2022-48759 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpmsg_ctrldev… |
CVE-2022-48754 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 ("phylib: Add device reset GPIO… |
CVE-2022-48742 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one… |
CVE-2022-48735 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created… |
CVE-2022-48733 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:create_snapshot()… |
CVE-2022-48726 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit ment… |
CVE-2024-6103 | High | 8.8 | 2024-06-20 | Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2021-47616 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init(… |
CVE-2021-47614 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in add_pble_prm When irdma_hmc_sd_one fails, 'chunk' is… |
CVE-2021-47600 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: dm btree remove: fix use after free in rebalance_children() Move dm_tm_unlock() after dm_… |
CVE-2021-47598 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call the… |
CVE-2021-47596 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove func… |
CVE-2021-47576 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() In resp_mode… |
CVE-2024-38612 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in cas… |
CVE-2024-38610 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() Patch series "mm: follow_pt… |
CVE-2024-38588 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftrace_location() KASAN reports a bug: BU… |
CVE-2024-38583 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log w… |
CVE-2024-38581 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom us… |
CVE-2024-38570 | Critical | 9.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and… |
CVE-2024-38561 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread finishes after the… |
CVE-2024-38555 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW comple… |
CVE-2024-38545 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When C… |
CVE-2024-38544 | Critical | 9.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming respons… |
CVE-2024-36979 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in br… |
CVE-2024-6064 | Medium | 5.3 | 2024-06-17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmt_node_end o… |
CVE-2024-32929 | High | 8.1 | 2024-06-13 | In gpu_slc_get_region of pixel_gpu_slc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2024-32900 | High | 7.8 | 2024-06-13 | In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_cam… |
CVE-2024-29787 | High | 7.8 | 2024-06-13 | In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local escalation of… |
CVE-2024-5847 | High | 8.8 | 2024-06-11 | Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
CVE-2024-5846 | High | 8.8 | 2024-06-11 | Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
CVE-2024-5845 | High | 8.8 | 2024-06-11 | Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chrom… |
CVE-2024-5842 | High | 8.8 | 2024-06-11 | Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfor… |
CVE-2024-5841 | High | 8.8 | 2024-06-11 | Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-5832 | High | 8.8 | 2024-06-11 | Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-5831 | High | 8.8 | 2024-06-11 | Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-30102 | High | 7.3 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30101 | High | 7.5 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30089 | High | 7.8 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30086 | High | 7.8 | 2024-06-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-30082 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30080 | Critical | 9.8 | 2024-06-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-30062 | High | 7.8 | 2024-06-11 | Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
CVE-2024-5702 | High | 7.5 | 2024-06-11 | Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, an… |
CVE-2024-5694 | High | 7.5 | 2024-06-11 | An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects… |
CVE-2024-5688 | High | 8.1 | 2024-06-11 | If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 12… |
CVE-2024-36971 | High | 7.8 | 2024-06-10 | In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU… |
CVE-2024-32502 | High | 8.4 | 2024-06-07 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos… |
CVE-2024-32503 | High | 8.4 | 2024-06-07 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos… |
CVE-2024-4610 | High | 7.8 | 2024-06-07 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU me… |
CVE-2024-5269 | High | 8.8 | 2024-06-06 | Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… |
CVE-2024-30375 | High | 7.8 | 2024-06-06 | Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-34362 | Medium | 5.9 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` that can c… |
CVE-2024-32974 | Medium | 5.9 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call st… |
CVE-2023-43544 | Medium | 6.7 | 2024-06-03 | Memory corruption when IPC callback handle is used after it has been released during register callback by another thread. |
CVE-2023-43543 | Medium | 6.7 | 2024-06-03 | Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. |
CVE-2024-36844 | High | 7.5 | 2024-05-31 | libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS… |
CVE-2024-5498 | High | 8.8 | 2024-05-30 | Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-5496 | High | 8.8 | 2024-05-30 | Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM… |
CVE-2024-5495 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-5494 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-36932 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Prevent use-after-free from occurring after cdev removal Since thermal_d… |
CVE-2024-36904 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use… |
CVE-2024-36899 | High | 7.0 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occ… |
CVE-2024-36886 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative… |
CVE-2024-34161 | Medium | 5.3 | 2024-05-29 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or… |
CVE-2023-43842 | High | 7.3 | 2024-05-28 | Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter user… |
CVE-2021-47571 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() The free_rtllib() funct… |
CVE-2021-47565 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's s… |
CVE-2021-47561 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect dat… |
CVE-2021-47549 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl When the `rmmod sata_fsl.ko`… |
CVE-2021-47541 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_al… |
CVE-2021-47533 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Clear the HVS FIFO commit pointer once done Commit 9ec03d7f1ed3 ("drm/vc4… |
CVE-2021-47525 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix use-after-free and memleak on unbind Deregister the port when unbin… |
CVE-2021-47521 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in ems_pcmcia_add_card() If the last channel is not avai… |
CVE-2021-47520 | High | 8.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: can: pch_can: pch_can_rx_normal: fix use after free After calling netif_receive_skb(skb)… |
CVE-2021-47517 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short per… |
CVE-2021-47506 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon a… |
CVE-2021-47505 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfd_poll() and binder_poll(… |
CVE-2021-47500 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: iio: mma8452: Fix trigger reference couting The mma8452 driver directly assigns a trigger… |
CVE-2024-36013 | High | 8.8 | 2024-05-23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to… |
CVE-2024-36012 | High | 7.8 | 2024-05-23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime… |
CVE-2024-5157 | High | 8.8 | 2024-05-22 | Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pa… |
CVE-2021-47479 | High | 7.0 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use-after-free in rtl8712_dl_fw Syzbot reported use-after-free in r… |
CVE-2021-47470 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential use-after-free in slab_debugfs_fops When sysfs_slab_add failed, w… |
CVE-2021-47459 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv It will trigger UAF f… |
CVE-2021-47456 | High | 8.4 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: can: peak_pci: peak_pci_remove(): fix UAF When remove the module peek_pci, referencing 'c… |
CVE-2023-52859 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncor… |
CVE-2023-52854 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: padata: Fix refcnt handling in padata_free_shell() In a high-load arm64 environment, the… |
CVE-2023-52852 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: __memcpy+0x128/0x250 f2f… |