CWE-416 · Use After Free (page 44)
Page 44 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-41000 | Medium | 5.5 | 2023-09-11 | GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c. |
CVE-2022-34227 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34224 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-28835 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code executio… |
CVE-2019-16471 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the co… |
CVE-2023-4575 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simul… |
CVE-2023-4574 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simu… |
CVE-2023-4573 | Medium | 6.5 | 2023-09-11 | When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exp… |
CVE-2022-30644 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2021-44189 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensi… |
CVE-2021-43753 | High | 7.8 | 2023-09-07 | Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing TIF files that could result in privilege… |
CVE-2021-40790 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensit… |
CVE-2023-4623 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege esc… |
CVE-2023-4622 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() func… |
CVE-2023-4244 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race co… |
CVE-2023-4208 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is… |
CVE-2023-4207 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is c… |
CVE-2023-4206 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change… |
CVE-2023-4015 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when b… |
CVE-2023-3777 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_del… |
CVE-2021-39859 | Medium | 5.5 | 2023-09-06 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Free vulnera… |
CVE-2021-21088 | High | 7.8 | 2023-09-06 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Fre… |
CVE-2023-3472 | High | 8.6 | 2023-09-06 | Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code. |
CVE-2023-4763 | High | 8.8 | 2023-09-05 | Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2023-33021 | High | 8.4 | 2023-09-05 | Memory corruption in Graphics while processing user packets for command submission. |
CVE-2023-4755 | Medium | 5.5 | 2023-09-04 | Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4752 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
CVE-2023-4750 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
CVE-2023-4733 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
CVE-2023-20849 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20835 | Medium | 6.4 | 2023-09-04 | In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20834 | Medium | 6.4 | 2023-09-04 | In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-3297 | High | 8.1 | 2023-09-01 | In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the acco… |
CVE-2023-40187 | High | 7.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject… |
CVE-2023-39355 | High | 7.0 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before… |
CVE-2023-4611 | High | 7.0 | 2023-08-29 | A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VM… |
CVE-2023-4572 | High | 8.8 | 2023-08-29 | Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-39562 | Medium | 5.5 | 2023-08-28 | GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows a… |
CVE-2023-36741 | High | 8.3 | 2023-08-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-46884 | High | 8.8 | 2023-08-24 | A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corr… |
CVE-2023-4430 | High | 8.8 | 2023-08-23 | Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-4429 | High | 8.8 | 2023-08-23 | Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2022-48560 | High | 7.5 | 2023-08-22 | A use-after-free exists in Python through 3.9 via heappushpop in heapq. |
CVE-2022-28073 | High | 7.5 | 2023-08-22 | A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. |
CVE-2022-28071 | High | 7.5 | 2023-08-22 | A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. |
CVE-2021-33390 | Critical | 9.8 | 2023-08-22 | dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421. |
CVE-2021-32421 | High | 7.5 | 2023-08-22 | dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. |
CVE-2020-27418 | Medium | 4.4 | 2023-08-22 | A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. |
CVE-2020-21896 | Medium | 5.5 | 2023-08-22 | A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers… |
CVE-2020-21722 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. |
CVE-2020-19725 | High | 7.8 | 2023-08-22 | There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes… |
CVE-2020-18780 | Medium | 5.5 | 2023-08-22 | A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command. |
CVE-2023-36787 | High | 8.8 | 2023-08-21 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-4394 | Medium | 6.7 | 2023-08-17 | A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attack… |
CVE-2023-4387 | High | 7.1 | 2023-08-16 | A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. Th… |
CVE-2023-4366 | High | 8.8 | 2023-08-15 | Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2023-4358 | High | 8.8 | 2023-08-15 | Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-4356 | High | 8.8 | 2023-08-15 | Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to pote… |
CVE-2023-4351 | High | 8.8 | 2023-08-15 | Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap cor… |
CVE-2023-4349 | High | 8.8 | 2023-08-15 | Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2023-2312 | High | 8.8 | 2023-08-15 | Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2023-28198 | High | 8.8 | 2023-08-14 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web conte… |
CVE-2023-30186 | Critical | 9.8 | 2023-08-14 | A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file. |
CVE-2023-40283 | High | 7.8 | 2023-08-14 | An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children o… |
CVE-2021-25786 | Medium | 5.3 | 2023-08-11 | An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter i… |
CVE-2023-38243 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use-After-Free vulnerability that could lead to discl… |
CVE-2023-38238 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use-After-Free vulnerability that could lead to discl… |
CVE-2023-38230 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use-After-Free vulnerability that could lead to discl… |
CVE-2023-38228 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38227 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38225 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38224 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38222 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-29303 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2023-38211 | High | 7.8 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. E… |
CVE-2023-38184 | High | 7.5 | 2023-08-08 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-38169 | High | 8.8 | 2023-08-08 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-36895 | High | 7.8 | 2023-08-08 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-36882 | High | 8.8 | 2023-08-08 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-35382 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35380 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-29330 | High | 8.8 | 2023-08-08 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2023-29328 | High | 8.8 | 2023-08-08 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2023-39549 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application contains a use-after-free vulnerability tha… |
CVE-2023-28830 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions <… |
CVE-2023-28577 | Medium | 6.7 | 2023-08-08 | In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the… |
CVE-2023-4147 | High | 7.8 | 2023-08-07 | A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to cras… |
CVE-2023-20801 | Medium | 6.4 | 2023-08-07 | In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20788 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20787 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-4133 | Medium | 5.5 | 2023-08-03 | A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming… |
CVE-2023-4132 | Medium | 5.5 | 2023-08-03 | A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is p… |
CVE-2023-22277 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or ar… |
CVE-2023-22317 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or ar… |
CVE-2023-22314 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or ar… |
CVE-2023-38748 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file… |
CVE-2023-4076 | High | 8.8 | 2023-08-03 | Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session… |
CVE-2023-4075 | High | 8.8 | 2023-08-03 | Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2023-4074 | High | 8.8 | 2023-08-03 | Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2023-3731 | High | 8.8 | 2023-08-01 | Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a user to install a malicious extension to… |