CWE-416 · Use After Free (page 48)
Page 48 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20734 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-20731 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-20729 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2022-23090 | High | 7.7 | 2024-02-15 | The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the referenc… |
CVE-2024-24990 | High | 7.5 | 2024-02-14 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/… |
CVE-2024-21384 | High | 7.8 | 2024-02-13 | Microsoft Office OneNote Remote Code Execution Vulnerability |
CVE-2024-21375 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21339 | Medium | 6.4 | 2024-02-13 | Windows USB Generic Parent Driver Remote Code Execution Vulnerability |
CVE-2024-1454 | Low | 3.4 | 2024-02-12 | The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or… |
CVE-2024-25110 | Critical | 9.8 | 2024-02-12 | The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free is… |
CVE-2024-23322 | High | 7.5 | 2024-02-09 | Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when the follow… |
CVE-2024-25443 | High | 7.8 | 2024-02-09 | An issue in the HuginBase::ImageVariable<double>::linkWith function of Hugin v2022.0.0 allows attackers to cause a heap-use-after-free via parsing a crafted im… |
CVE-2024-1312 | Medium | 5.1 | 2024-02-08 | A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot… |
CVE-2024-24189 | Critical | 9.8 | 2024-02-07 | Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c. |
CVE-2024-1284 | Critical | 9.8 | 2024-02-07 | Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-24266 | High | 7.5 | 2024-02-05 | gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src/filters/dasher.c. |
CVE-2024-24263 | High | 7.5 | 2024-02-05 | Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_line function at /lotos/src/response.c. |
CVE-2024-24262 | High | 7.5 | 2024-02-05 | media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function at /uac/sip-uac-transaction.c. |
CVE-2024-24260 | High | 7.5 | 2024-02-05 | media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function at /uac/sip-uac-subscribe.c. |
CVE-2023-5249 | High | 7.0 | 2024-02-05 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory… |
CVE-2020-36773 | Critical | 9.8 | 2024-02-04 | Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in… |
CVE-2024-25062 | High | 7.5 | 2024-02-04 | An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabl… |
CVE-2024-21860 | High | 8.2 | 2024-02-02 | in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free. |
CVE-2024-21399 | High | 8.3 | 2024-02-02 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-1086 | High | 7.8 | 2024-01-31 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_… |
CVE-2024-1085 | High | 7.8 | 2024-01-31 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_setelem_ca… |
CVE-2024-1077 | High | 8.8 | 2024-01-30 | Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
CVE-2024-1060 | High | 8.8 | 2024-01-30 | Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-1059 | High | 8.8 | 2024-01-30 | Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML… |
CVE-2024-21803 | Low | 3.5 | 2024-01-30 | Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associat… |
CVE-2024-21385 | High | 8.3 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-21326 | Critical | 9.6 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-0813 | High | 8.8 | 2024-01-24 | Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2024-0807 | High | 8.8 | 2024-01-24 | Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-0806 | High | 8.8 | 2024-01-24 | Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interactio… |
CVE-2024-0752 | Medium | 6.5 | 2024-01-23 | A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable cr… |
CVE-2024-0746 | Medium | 6.5 | 2024-01-23 | A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunde… |
CVE-2023-51043 | High | 7.0 | 2024-01-23 | In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver un… |
CVE-2023-51042 | High | 7.8 | 2024-01-23 | In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free. |
CVE-2024-23848 | Medium | 5.5 | 2024-01-23 | In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-a… |
CVE-2024-0775 | Medium | 6.7 | 2024-01-22 | A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information lea… |
CVE-2024-22956 | High | 7.8 | 2024-01-19 | swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838 |
CVE-2024-22915 | High | 7.8 | 2024-01-19 | A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution. |
CVE-2024-22914 | Medium | 5.5 | 2024-01-19 | A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service. |
CVE-2024-22920 | High | 7.8 | 2024-01-19 | swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c. |
CVE-2023-48353 | Medium | 4.4 | 2024-01-18 | In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed |
CVE-2024-20952 | High | 7.4 | 2024-01-16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported vers… |
CVE-2024-0582 | High | 7.8 | 2024-01-16 | A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and… |
CVE-2024-0232 | Medium | 4.7 | 2024-01-16 | A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a… |
CVE-2023-52115 | High | 7.5 | 2024-01-16 | The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions. |
CVE-2024-0562 | High | 7.8 | 2024-01-15 | A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delay… |
CVE-2023-37117 | Critical | 9.8 | 2024-01-12 | A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. |
CVE-2023-51782 | High | 7.0 | 2024-01-11 | An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition. |
CVE-2023-51781 | High | 7.0 | 2024-01-11 | An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition. |
CVE-2023-51780 | High | 7.0 | 2024-01-11 | An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. |
CVE-2023-42870 | High | 7.8 | 2024-01-10 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to execu… |
CVE-2023-41974 | High | 7.8 | 2024-01-10 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be… |
CVE-2023-40414 | Critical | 9.8 | 2024-01-10 | A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPadOS 17, tvOS 17, macOS Sonoma 14, Safari… |
CVE-2023-32378 | High | 7.8 | 2024-01-10 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. A… |
CVE-2024-21307 | High | 7.5 | 2024-01-09 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-20683 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20681 | High | 7.8 | 2024-01-09 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
CVE-2024-20655 | Medium | 6.6 | 2024-01-09 | Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
CVE-2022-2602 | Medium | 5.3 | 2024-01-08 | io_uring UAF, Unix SCM garbage collection |
CVE-2022-2588 | Medium | 5.3 | 2024-01-08 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handl… |
CVE-2022-2586 | Medium | 5.3 | 2024-01-08 | It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. |
CVE-2022-2585 | Medium | 5.3 | 2024-01-08 | It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free. |
CVE-2023-37578 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37577 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37576 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37575 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37574 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-37573 | High | 7.8 | 2024-01-08 | Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbit… |
CVE-2023-5091 | Medium | 5.5 | 2024-01-08 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access… |
CVE-2024-22088 | Critical | 9.8 | 2024-01-05 | Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled. |
CVE-2023-6270 | High | 7.0 | 2024-01-04 | A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`… |
CVE-2024-0225 | High | 8.8 | 2024-01-04 | Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-0224 | High | 8.8 | 2024-01-04 | Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-0222 | High | 8.8 | 2024-01-04 | Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap… |
CVE-2024-0217 | Low | 3.3 | 2024-01-03 | A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memor… |
CVE-2023-49554 | Medium | 5.5 | 2024-01-03 | Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs… |
CVE-2024-0193 | High | 7.8 | 2024-01-02 | A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, th… |
CVE-2023-49142 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer. |
CVE-2023-49135 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer. |
CVE-2023-48360 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer. |
CVE-2023-47857 | Medium | 4.0 | 2024-01-02 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer. |
CVE-2023-43514 | High | 8.4 | 2024-01-02 | Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP. |
CVE-2023-33120 | High | 7.8 | 2024-01-02 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
CVE-2023-33118 | High | 7.8 | 2024-01-02 | Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. |
CVE-2023-33117 | High | 7.8 | 2024-01-02 | Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. |
CVE-2023-33114 | High | 8.4 | 2024-01-02 | Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
CVE-2023-33108 | High | 8.4 | 2024-01-02 | Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. |
CVE-2023-33094 | High | 8.4 | 2024-01-02 | Memory corruption while running VK synchronization with KASAN enabled. |
CVE-2023-52266 | High | 7.5 | 2023-12-31 | ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this. |
CVE-2023-7152 | Medium | 5.5 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd… |
CVE-2023-6932 | High | 7.8 | 2023-12-19 | A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be expl… |
CVE-2023-6862 | High | 8.8 | 2023-12-19 | A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 1… |
CVE-2023-6859 | High | 8.8 | 2023-12-19 | A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Fi… |
CVE-2023-6817 | High | 7.8 | 2023-12-18 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_p… |
CVE-2023-6707 | High | 8.8 | 2023-12-14 | Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |