CWE-416 · Use After Free (page 46)
Page 46 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26223 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26222 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26221 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-21409 | High | 7.3 | 2024-04-09 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-23658 | Medium | 4.4 | 2024-04-08 | In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed |
CVE-2024-30416 | High | 7.5 | 2024-04-07 | Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-3158 | High | 8.8 | 2024-04-06 | Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-2312 | Medium | 6.7 | 2024-04-05 | GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to… |
CVE-2024-31083 | High | 7.8 | 2024-04-05 | A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new g… |
CVE-2024-3299 | High | 7.8 | 2024-04-04 | Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS… |
CVE-2024-26804 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan spl… |
CVE-2024-26801 | High | 8.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HA… |
CVE-2024-26800 | Critical | 9.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the… |
CVE-2024-26793 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_newlink() The gtp_link_ops operations s… |
CVE-2024-30366 | High | 7.8 | 2024-04-03 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30334 | High | 7.8 | 2024-04-03 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30333 | High | 7.8 | 2024-04-03 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30332 | High | 7.8 | 2024-04-03 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30331 | High | 7.8 | 2024-04-03 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30330 | High | 7.8 | 2024-04-03 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30329 | Low | 3.3 | 2024-04-03 | Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information o… |
CVE-2024-30328 | High | 7.8 | 2024-04-03 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30327 | High | 7.8 | 2024-04-03 | Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30326 | High | 7.8 | 2024-04-03 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30325 | High | 7.8 | 2024-04-03 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30324 | High | 7.8 | 2024-04-03 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30322 | High | 7.8 | 2024-04-03 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-26754 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() The gtp_net_ops pernet… |
CVE-2024-26749 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() ... cdns3_gadget… |
CVE-2024-26739 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirect… |
CVE-2024-26737 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel The following race… |
CVE-2024-26735 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure… |
CVE-2024-26734 | High | 7.0 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix possible use-after-free and memory leaks in devlink_init() The pernet operat… |
CVE-2024-26724 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed t… |
CVE-2024-26689 | High | 8.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ceph: prevent use-after-free in encode_cap_msg() In fs/ceph/caps.c, in encode_cap_msg()… |
CVE-2023-52637 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) Lock jsk-… |
CVE-2024-30371 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30367 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30365 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30362 | High | 7.8 | 2024-04-02 | Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2024-30361 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30360 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30358 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30354 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30352 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30351 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30346 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30345 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30344 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30343 | High | 7.8 | 2024-04-02 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30342 | High | 7.8 | 2024-04-02 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30339 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30338 | High | 7.8 | 2024-04-02 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-30337 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30336 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-30809 | High | 7.5 | 2024-04-02 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of… |
CVE-2024-30808 | Low | 2.7 | 2024-04-02 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_SubStream::~AP4_SubStream at Ap4ByteStream.cpp, leading to a Den… |
CVE-2024-30807 | High | 7.5 | 2024-04-02 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denia… |
CVE-2024-28951 | Medium | 5.5 | 2024-04-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. |
CVE-2024-26680 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: Fix DMA mapping for PTP hwts ring Function aq_ring_hwts_rx_alloc() maps ex… |
CVE-2024-26656 | High | 7.8 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpu_ge… |
CVE-2024-22180 | Low | 3.3 | 2024-04-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free. |
CVE-2024-22098 | Medium | 6.5 | 2024-04-02 | in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |
CVE-2024-21472 | High | 8.4 | 2024-04-01 | Memory corruption in Kernel while handling GPU operations. |
CVE-2024-21468 | High | 8.4 | 2024-04-01 | Memory corruption when there is failed unmap operation in GPU. |
CVE-2024-26654 | High | 7.8 | 2024-04-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer cou… |
CVE-2023-52629 | High | 8.4 | 2024-03-29 | In the Linux kernel, the following vulnerability has been resolved: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code… |
CVE-2023-42950 | High | 8.8 | 2024-03-28 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, ma… |
CVE-2023-42892 | High | 7.8 | 2024-03-28 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A… |
CVE-2024-2886 | High | 7.5 | 2024-03-26 | Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromiu… |
CVE-2024-2885 | High | 8.8 | 2024-03-26 | Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-2883 | High | 8.8 | 2024-03-26 | Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-21918 | High | 7.8 | 2024-03-26 | A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the sof… |
CVE-2021-47162 | Critical | 9.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a good idea to append th… |
CVE-2021-47142 | High | 7.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg to NULL. Hit panic b… |
CVE-2024-30161 | Medium | 6.5 | 2024-03-24 | In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are… |
CVE-2024-1848 | High | 7.8 | 2024-03-22 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-27934 | High | 8.4 | 2024-03-21 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use of inherently unsafe `*const c_void` and… |
CVE-2024-2627 | High | 8.8 | 2024-03-20 | Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-2612 | High | 8.1 | 2024-03-19 | If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code… |
CVE-2024-20752 | High | 7.8 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2021-47131 | High | 8.1 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up When a netdev with acti… |
CVE-2021-47123 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linked timeout on io_lin… |
CVE-2021-47118 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` During boot, kernel_init_freeable() ini… |
CVE-2021-47113 | High | 7.1 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: btrfs: abort in rename_exchange if we fail to insert the second ref Error injection stres… |
CVE-2021-47111 | High | 8.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: xen-netback: take a reference to the RX task thread Do this in order to prevent the task… |
CVE-2024-26630 | High | 7.1 | 2024-03-13 | In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix folio read-after-free in cache walk In cachestat, we access the folio… |
CVE-2024-2400 | High | 8.8 | 2024-03-13 | Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2024-23300 | High | 7.8 | 2024-03-12 | A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead… |
CVE-2024-26182 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21443 | High | 7.3 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21439 | High | 7.0 | 2024-03-12 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-21437 | High | 7.8 | 2024-03-12 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-21426 | High | 7.8 | 2024-03-12 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-21407 | High | 8.1 | 2024-03-12 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-21334 | Critical | 9.8 | 2024-03-12 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
CVE-2024-27213 | High | 8.4 | 2024-03-11 | In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privileg… |
CVE-2024-27205 | High | 8.4 | 2024-03-11 | there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2024-25985 | High | 8.4 | 2024-03-11 | In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2024-26619 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix module loading free order Reverse order of kfree calls to resolve use-after-fr… |