CWE-416 · Use After Free (page 50)
Page 50 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44095 | High | 7.5 | 2023-10-11 | Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash. |
CVE-2023-38216 | Medium | 5.5 | 2023-10-11 | Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive m… |
CVE-2023-41774 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41773 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41771 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41770 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41769 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41768 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41767 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41765 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-38166 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-36902 | High | 7.0 | 2023-10-10 | Windows Runtime Remote Code Execution Vulnerability |
CVE-2023-36776 | High | 7.0 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36743 | High | 7.8 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36726 | High | 7.8 | 2023-10-10 | Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability |
CVE-2023-36605 | High | 7.4 | 2023-10-10 | Windows Named Pipe Filesystem Elevation of Privilege Vulnerability |
CVE-2023-36583 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36565 | High | 7.0 | 2023-10-10 | Microsoft Office Graphics Elevation of Privilege Vulnerability |
CVE-2023-41675 | Medium | 5.3 | 2023-10-10 | A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and… |
CVE-2023-40632 | High | 7.5 | 2023-10-08 | In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges nee… |
CVE-2023-45322 | Medium | 6.5 | 2023-10-06 | libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vend… |
CVE-2023-39928 | High | 8.8 | 2023-10-06 | A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause m… |
CVE-2023-38703 | Critical | 9.8 | 2023-10-06 | PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher l… |
CVE-2023-34970 | Medium | 4.7 | 2023-10-03 | A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condi… |
CVE-2023-33200 | Medium | 4.7 | 2023-10-03 | A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by t… |
CVE-2023-33039 | High | 8.4 | 2023-10-03 | Memory corruption in Automotive Display while destroying the image handle created using connected display driver. |
CVE-2023-33029 | High | 8.4 | 2023-10-03 | Memory corruption in DSP Service during a remote call from HLOS to DSP. |
CVE-2023-5345 | High | 7.8 | 2023-10-03 | A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in sm… |
CVE-2023-4211 | Medium | 5.5 | 2023-10-01 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
CVE-2023-5187 | High | 8.8 | 2023-09-28 | Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-5186 | High | 8.8 | 2023-09-28 | Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to pot… |
CVE-2023-5197 | High | 7.8 | 2023-09-27 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and remov… |
CVE-2023-5175 | Critical | 9.8 | 2023-09-27 | During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a p… |
CVE-2023-5174 | Critical | 9.8 | 2023-09-27 | If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a… |
CVE-2023-5172 | Critical | 9.8 | 2023-09-27 | A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash… |
CVE-2023-5171 | Medium | 6.5 | 2023-09-27 | During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potent… |
CVE-2023-41995 | High | 7.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execu… |
CVE-2023-41071 | High | 7.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An… |
CVE-2023-39434 | High | 8.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web… |
CVE-2023-32541 | High | 8.8 | 2023-09-27 | A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-aft… |
CVE-2023-39453 | Critical | 9.8 | 2023-09-25 | A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitra… |
CVE-2023-42482 | Medium | 4.7 | 2023-09-21 | Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. |
CVE-2023-41375 | High | 7.8 | 2023-09-20 | Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially craft… |
CVE-2023-4806 | Medium | 5.9 | 2023-09-18 | A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an applicatio… |
CVE-2023-36735 | Critical | 9.6 | 2023-09-15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-36562 | High | 7.1 | 2023-09-15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-2680 | High | 7.5 | 2023-09-13 | This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2… |
CVE-2023-4813 | Medium | 5.9 | 2023-09-12 | A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. Th… |
CVE-2023-4921 | High | 7.8 | 2023-09-12 | A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc… |
CVE-2023-38161 | High | 7.8 | 2023-09-12 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-38160 | Medium | 5.5 | 2023-09-12 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2023-38139 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36804 | High | 7.8 | 2023-09-12 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-36802 | High | 7.8 | 2023-09-12 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
CVE-2023-36760 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-38075 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-35687 | High | 7.8 | 2023-09-11 | In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no a… |
CVE-2023-35666 | High | 7.8 | 2023-09-11 | In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2023-35658 | High | 8.8 | 2023-09-11 | In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) c… |
CVE-2023-39070 | High | 7.8 | 2023-09-11 | An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934. |
CVE-2023-41000 | Medium | 5.5 | 2023-09-11 | GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c. |
CVE-2022-34227 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34224 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-28835 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code executio… |
CVE-2019-16471 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the co… |
CVE-2023-4575 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simul… |
CVE-2023-4574 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simu… |
CVE-2023-4573 | Medium | 6.5 | 2023-09-11 | When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exp… |
CVE-2022-30644 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2021-44189 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensi… |
CVE-2021-43753 | High | 7.8 | 2023-09-07 | Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing TIF files that could result in privilege… |
CVE-2021-40790 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensit… |
CVE-2023-4623 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege esc… |
CVE-2023-4622 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() fu… |
CVE-2023-4244 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race co… |
CVE-2023-4208 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is… |
CVE-2023-4207 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is c… |
CVE-2023-4206 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change… |
CVE-2023-4015 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when b… |
CVE-2023-3777 | High | 7.8 | 2023-09-06 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_del… |
CVE-2021-39859 | Medium | 5.5 | 2023-09-06 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Free vulnera… |
CVE-2021-21088 | High | 7.8 | 2023-09-06 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Fre… |
CVE-2023-3472 | High | 8.6 | 2023-09-06 | Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code. |
CVE-2023-4763 | High | 8.8 | 2023-09-05 | Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2023-33021 | High | 8.4 | 2023-09-05 | Memory corruption in Graphics while processing user packets for command submission. |
CVE-2023-4755 | Medium | 5.5 | 2023-09-04 | Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4752 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
CVE-2023-4750 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
CVE-2023-4733 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
CVE-2023-20849 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20835 | Medium | 6.4 | 2023-09-04 | In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20834 | Medium | 6.4 | 2023-09-04 | In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-3297 | High | 8.1 | 2023-09-01 | In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the acco… |
CVE-2023-40187 | High | 7.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject… |
CVE-2023-39355 | High | 7.0 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before… |
CVE-2023-4611 | High | 7.0 | 2023-08-29 | A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VM… |
CVE-2023-4572 | High | 8.8 | 2023-08-29 | Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-39562 | Medium | 5.5 | 2023-08-28 | GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows a… |
CVE-2023-36741 | High | 8.3 | 2023-08-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-46884 | High | 8.8 | 2023-08-24 | A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corr… |