CWE-416 · Use After Free (page 43)
Page 43 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46769 | High | 7.5 | 2023-11-08 | Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability. |
CVE-2023-46768 | High | 7.5 | 2023-11-08 | Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-4295 | High | 7.8 | 2023-11-07 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
CVE-2023-33074 | High | 8.4 | 2023-11-07 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
CVE-2023-47233 | Medium | 4.3 | 2023-11-03 | The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug)… |
CVE-2023-1476 | High | 7.0 | 2023-11-03 | A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between… |
CVE-2023-1194 | High | 7.1 | 2023-11-03 | An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel… |
CVE-2023-36034 | High | 7.3 | 2023-11-03 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-3397 | High | 7.0 | 2023-11-01 | A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attac… |
CVE-2023-1193 | Medium | 6.5 | 2023-11-01 | A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could al… |
CVE-2023-1192 | Medium | 6.5 | 2023-11-01 | A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are stil… |
CVE-2023-5856 | High | 8.8 | 2023-11-01 | Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten… |
CVE-2023-5855 | High | 8.8 | 2023-11-01 | Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… |
CVE-2023-5854 | High | 8.8 | 2023-11-01 | Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
CVE-2023-5852 | High | 8.8 | 2023-11-01 | Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
CVE-2023-5178 | High | 8.8 | 2023-11-01 | A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux k… |
CVE-2023-21395 | Medium | 6.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additiona… |
CVE-2023-21392 | High | 8.8 | 2023-10-30 | In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetoot… |
CVE-2023-21381 | High | 7.8 | 2023-10-30 | In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no a… |
CVE-2023-21361 | High | 8.8 | 2023-10-30 | In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Blue… |
CVE-2023-21355 | High | 7.8 | 2023-10-30 | In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional executi… |
CVE-2023-44323 | Medium | 5.5 | 2023-10-30 | Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulne… |
CVE-2023-40140 | High | 7.8 | 2023-10-27 | In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead… |
CVE-2023-40131 | High | 7.0 | 2023-10-27 | In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additiona… |
CVE-2023-46246 | Medium | 4.0 | 2023-10-27 | Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c`… |
CVE-2023-5574 | High | 7.0 | 2023-10-25 | A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with mul… |
CVE-2023-5380 | Medium | 4.7 | 2023-10-25 | A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with mult… |
CVE-2023-41976 | High | 8.8 | 2023-10-25 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7… |
CVE-2023-40404 | High | 7.8 | 2023-10-25 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code wi… |
CVE-2023-5728 | High | 7.5 | 2023-10-25 | During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerab… |
CVE-2023-5472 | High | 8.8 | 2023-10-25 | Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2023-5633 | High | 7.8 | 2023-10-23 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled wh… |
CVE-2023-34366 | High | 7.8 | 2023-10-19 | A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause memory co… |
CVE-2023-42459 | High | 8.6 | 2023-10-16 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA subme… |
CVE-2023-45898 | High | 7.8 | 2023-10-16 | The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent. |
CVE-2023-5476 | High | 8.8 | 2023-10-11 | Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-5473 | Medium | 6.3 | 2023-10-11 | Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |
CVE-2023-5218 | High | 8.8 | 2023-10-11 | Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2023-5535 | High | 7.8 | 2023-10-11 | Use After Free in GitHub repository vim/vim prior to v9.0.2010. |
CVE-2023-35660 | Medium | 6.7 | 2023-10-11 | In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio… |
CVE-2023-44095 | High | 7.5 | 2023-10-11 | Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash. |
CVE-2023-38216 | Medium | 5.5 | 2023-10-11 | Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive m… |
CVE-2023-41774 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41773 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41771 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41770 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41769 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41768 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41767 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41765 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-38166 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-36902 | High | 7.0 | 2023-10-10 | Windows Runtime Remote Code Execution Vulnerability |
CVE-2023-36776 | High | 7.0 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36743 | High | 7.8 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36726 | High | 7.8 | 2023-10-10 | Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability |
CVE-2023-36605 | High | 7.4 | 2023-10-10 | Windows Named Pipe Filesystem Elevation of Privilege Vulnerability |
CVE-2023-36583 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36565 | High | 7.0 | 2023-10-10 | Microsoft Office Graphics Elevation of Privilege Vulnerability |
CVE-2023-41675 | Medium | 5.3 | 2023-10-10 | A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and… |
CVE-2023-40632 | High | 7.5 | 2023-10-08 | In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges nee… |
CVE-2023-45322 | Medium | 6.5 | 2023-10-06 | libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vend… |
CVE-2023-39928 | High | 8.8 | 2023-10-06 | A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause m… |
CVE-2023-38703 | Critical | 9.8 | 2023-10-06 | PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher l… |
CVE-2023-34970 | Medium | 4.7 | 2023-10-03 | A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condi… |
CVE-2023-33200 | Medium | 4.7 | 2023-10-03 | A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by t… |
CVE-2023-33039 | High | 8.4 | 2023-10-03 | Memory corruption in Automotive Display while destroying the image handle created using connected display driver. |
CVE-2023-33029 | High | 8.4 | 2023-10-03 | Memory corruption in DSP Service during a remote call from HLOS to DSP. |
CVE-2023-5345 | High | 7.8 | 2023-10-03 | A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in sm… |
CVE-2023-4211 | Medium | 5.5 | 2023-10-01 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
CVE-2023-5187 | High | 8.8 | 2023-09-28 | Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-5186 | High | 8.8 | 2023-09-28 | Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to pot… |
CVE-2023-5197 | High | 7.8 | 2023-09-27 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and remov… |
CVE-2023-5175 | Critical | 9.8 | 2023-09-27 | During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a p… |
CVE-2023-5174 | Critical | 9.8 | 2023-09-27 | If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a… |
CVE-2023-5172 | Critical | 9.8 | 2023-09-27 | A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash… |
CVE-2023-5171 | Medium | 6.5 | 2023-09-27 | During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potent… |
CVE-2023-41995 | High | 7.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execu… |
CVE-2023-41071 | High | 7.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An… |
CVE-2023-39434 | High | 8.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web… |
CVE-2023-32541 | High | 8.8 | 2023-09-27 | A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-aft… |
CVE-2023-39453 | Critical | 9.8 | 2023-09-25 | A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitra… |
CVE-2023-42482 | Medium | 4.7 | 2023-09-21 | Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. |
CVE-2023-41375 | High | 7.8 | 2023-09-20 | Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially craft… |
CVE-2023-4806 | Medium | 5.9 | 2023-09-18 | A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an applicatio… |
CVE-2023-36735 | Critical | 9.6 | 2023-09-15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-36562 | High | 7.1 | 2023-09-15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-2680 | High | 7.5 | 2023-09-13 | This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2… |
CVE-2023-4813 | Medium | 5.9 | 2023-09-12 | A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. Th… |
CVE-2023-4921 | High | 7.8 | 2023-09-12 | A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc… |
CVE-2023-38161 | High | 7.8 | 2023-09-12 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-38160 | Medium | 5.5 | 2023-09-12 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2023-38139 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36804 | High | 7.8 | 2023-09-12 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-36802 | High | 7.8 | 2023-09-12 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
CVE-2023-36760 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-38075 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-35687 | High | 7.8 | 2023-09-11 | In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no a… |
CVE-2023-35666 | High | 7.8 | 2023-09-11 | In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2023-35658 | High | 8.8 | 2023-09-11 | In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) c… |
CVE-2023-39070 | High | 7.8 | 2023-09-11 | An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934. |