CWE-416 · Use After Free (page 45)
Page 45 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-42041 | High | 7.8 | 2024-05-03 | PDF-XChange Editor Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2023-42040 | High | 7.8 | 2024-05-03 | PDF-XChange Editor mailForm Use-After-Free Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta… |
CVE-2023-40491 | High | 7.8 | 2024-05-03 | Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2023-40489 | High | 7.8 | 2024-05-03 | Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2023-40488 | High | 7.8 | 2024-05-03 | Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2023-40487 | High | 7.8 | 2024-05-03 | Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2023-39491 | High | 7.8 | 2024-05-03 | PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-39488 | High | 7.8 | 2024-05-03 | PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-38117 | High | 7.8 | 2024-05-03 | Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-38114 | High | 7.8 | 2024-05-03 | Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-38113 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information o… |
CVE-2023-38112 | High | 7.8 | 2024-05-03 | Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2023-38111 | High | 7.8 | 2024-05-03 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2023-38107 | High | 7.8 | 2024-05-03 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2023-38078 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informat… |
CVE-2023-37355 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JPG File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informat… |
CVE-2023-35734 | Medium | 6.5 | 2024-05-03 | Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-34294 | Medium | 6.5 | 2024-05-03 | Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-32174 | Critical | 9.1 | 2024-05-03 | Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2023-32172 | Medium | 6.5 | 2024-05-03 | Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-ser… |
CVE-2023-32135 | Medium | 6.5 | 2024-05-03 | Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-32134 | High | 8.8 | 2024-05-03 | Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2023-27366 | High | 7.8 | 2024-05-03 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2023-27348 | High | 7.8 | 2024-05-03 | PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-27338 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor TIF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2023-27331 | High | 7.8 | 2024-05-03 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2023-27330 | High | 7.8 | 2024-05-03 | Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2023-27329 | High | 7.8 | 2024-05-03 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30305 | High | 7.8 | 2024-05-02 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-30304 | High | 7.8 | 2024-05-02 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-30303 | High | 7.8 | 2024-05-02 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-30302 | Medium | 5.5 | 2024-05-02 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30301 | High | 7.8 | 2024-05-02 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2023-49606 | Critical | 9.8 | 2024-05-01 | A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trig… |
CVE-2024-4368 | High | 8.8 | 2024-05-01 | Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-4331 | High | 8.8 | 2024-05-01 | Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2024-4060 | Medium | 6.5 | 2024-05-01 | Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-27070 | High | 7.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault syzbot reports a f2fs bug a… |
CVE-2024-27061 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Fix use after free in unprepare sun8i_ce_cipher_unprepare should be ca… |
CVE-2024-27052 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work The workqueue might still be runni… |
CVE-2024-27049 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH]… |
CVE-2024-27043 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvb_register_device, *pdvbdev is set equal t… |
CVE-2024-26996 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm f… |
CVE-2024-26983 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: bootconfig: use memblock_free_late to free xbc memory to buddy On the time to free xbc me… |
CVE-2024-26974 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's erro… |
CVE-2024-26961 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key… |
CVE-2024-26958 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning co… |
CVE-2024-26957 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo… |
CVE-2024-26951 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of empty list If all peer… |
CVE-2024-26944 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in do_zone_finish() Shinichiro reported the following us… |
CVE-2024-26939 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging tools were sporadic… |
CVE-2024-25938 | High | 8.8 | 2024-04-30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious P… |
CVE-2024-25648 | High | 8.8 | 2024-04-30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious… |
CVE-2022-48666 | Critical | 9.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. Both imple… |
CVE-2022-48649 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slub_debug test, kfence… |
CVE-2022-48637 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is requ… |
CVE-2024-26928 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are bei… |
CVE-2023-48184 | Low | 3.9 | 2024-04-23 | QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage collection of async functions with closures. |
CVE-2024-1065 | Medium | 5.9 | 2024-04-19 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2024-0671 | Medium | 6.8 | 2024-04-19 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2024-27975 | High | 8.8 | 2024-04-19 | An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary co… |
CVE-2024-31583 | High | 7.8 | 2024-04-17 | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. |
CVE-2024-3914 | Medium | 6.5 | 2024-04-17 | Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-31578 | High | 7.5 | 2024-04-17 | FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. |
CVE-2024-26909 | High | 7.0 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free A recent DRM series purporti… |
CVE-2024-26907 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------[ cut here… |
CVE-2024-26898 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CV… |
CVE-2024-26895 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilc_netdev… |
CVE-2024-26892 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH]… |
CVE-2024-26886 | Medium | 6.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may cause a d… |
CVE-2024-26875 | Medium | 6.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use… |
CVE-2024-26872 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occas… |
CVE-2024-26866 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use-after-free in probe() fsl_lpspi_probe() is allocating/dis… |
CVE-2024-26865 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warnin… |
CVE-2024-26856 | High | 8.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: Fix use after free inside sparx5_del_mact_entry Based on the static analyzis… |
CVE-2024-26852 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-f… |
CVE-2024-26838 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the following issue assoc… |
CVE-2024-3837 | High | 8.8 | 2024-04-17 | Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |
CVE-2024-3834 | High | 8.8 | 2024-04-17 | Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-30378 | Medium | 5.5 | 2024-04-16 | A Use After Free vulnerability in command processing of Juniper Networks Junos OS on MX Series allows a local, authenticated attacker to cause the broadband ed… |
CVE-2024-3861 | Medium | 4.0 | 2024-04-16 | If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability… |
CVE-2024-3857 | High | 7.8 | 2024-04-16 | The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affec… |
CVE-2024-3856 | High | 8.8 | 2024-04-16 | A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox < 125. |
CVE-2024-3853 | High | 7.5 | 2024-04-16 | A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firef… |
CVE-2024-30386 | Medium | 5.3 | 2024-04-12 | A Use-After-Free vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, ad… |
CVE-2024-3515 | Medium | 6.5 | 2024-04-10 | Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2021-47209 | High | 7.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining cfs_rq's Kevin is reporting crashes w… |
CVE-2021-47204 | High | 7.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove Access to netdev after free_netdev… |
CVE-2021-47200 | High | 7.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap drm_gem_ttm_mmap() drops a re… |
CVE-2021-47198 | High | 7.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine An error is detected with the… |
CVE-2021-47196 | High | 7.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwarding to the driver Preset both receive an… |
CVE-2021-47195 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock whe… |
CVE-2024-29043 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26241 | High | 7.8 | 2024-04-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-26237 | High | 7.8 | 2024-04-09 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
CVE-2024-26233 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26231 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26230 | High | 7.8 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26227 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26224 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |