CWE-416 · Use After Free (page 50)
Page 50 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3636 | Medium | 5.5 | 2022-10-21 | A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/… |
CVE-2022-3625 | Medium | 4.6 | 2022-10-21 | A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/co… |
CVE-2022-39823 | High | 7.5 | 2022-10-20 | An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation points may… |
CVE-2022-3620 | Medium | 5.6 | 2022-10-20 | A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the component DMARC Ha… |
CVE-2022-3586 | Medium | 5.5 | 2022-10-19 | A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb fiel… |
CVE-2022-43033 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4_HdlrAtom::~AP4_HdlrAtom() which allows attackers to cause a Denial of Ser… |
CVE-2022-25723 | High | 8.4 | 2022-10-19 | Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile |
CVE-2022-25666 | Medium | 6.7 | 2022-10-19 | Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2022-22077 | High | 8.4 | 2022-10-19 | Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile |
CVE-2022-22208 | Medium | 5.9 | 2022-10-18 | A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based a… |
CVE-2022-3559 | Medium | 4.6 | 2022-10-17 | A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation le… |
CVE-2022-0699 | Critical | 9.8 | 2022-10-17 | A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have… |
CVE-2022-3534 | Medium | 5.5 | 2022-10-17 | A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/l… |
CVE-2022-3523 | Medium | 5.3 | 2022-10-16 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driv… |
CVE-2022-38448 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38447 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38446 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38445 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38444 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38442 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38437 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2022-41303 | High | 7.8 | 2022-10-14 | A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the applicati… |
CVE-2022-38983 | Critical | 9.8 | 2022-10-14 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. |
CVE-2022-42720 | High | 7.8 | 2022-10-14 | Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers… |
CVE-2022-42719 | High | 8.8 | 2022-10-13 | A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (abl… |
CVE-2022-20421 | High | 7.8 | 2022-10-11 | In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2022-20409 | Medium | 6.7 | 2022-10-11 | In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with Syst… |
CVE-2021-0696 | High | 7.0 | 2022-10-11 | In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no addition… |
CVE-2022-42703 | Medium | 5.5 | 2022-10-09 | mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. |
CVE-2021-40166 | High | 7.8 | 2022-10-07 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them… |
CVE-2022-39853 | Medium | 4.4 | 2022-10-07 | A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. |
CVE-2022-39847 | Medium | 4.9 | 2022-10-07 | Use after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious act… |
CVE-2022-41850 | Medium | 4.7 | 2022-09-30 | roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations whe… |
CVE-2022-41849 | Medium | 4.2 | 2022-09-30 | drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes… |
CVE-2022-41848 | Medium | 4.2 | 2022-09-30 | drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker remo… |
CVE-2022-3352 | High | 7.8 | 2022-09-29 | Use After Free in GitHub repository vim/vim prior to 9.0.0614. |
CVE-2022-40278 | High | 7.5 | 2022-09-29 | An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sql… |
CVE-2022-38222 | High | 7.8 | 2022-09-29 | There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for examp… |
CVE-2022-22058 | High | 8.4 | 2022-09-26 | Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2022-3199 | High | 8.8 | 2022-09-26 | Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2022-3198 | High | 8.8 | 2022-09-26 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
CVE-2022-3197 | High | 8.8 | 2022-09-26 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
CVE-2022-3196 | High | 8.8 | 2022-09-26 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
CVE-2022-3058 | High | 8.8 | 2022-09-26 | Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
CVE-2022-3055 | High | 8.8 | 2022-09-26 | Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to pot… |
CVE-2022-3046 | High | 8.8 | 2022-09-26 | Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2022-3041 | High | 8.8 | 2022-09-26 | Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3039 | High | 8.8 | 2022-09-26 | Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3038 | High | 8.8 | 2022-09-26 | Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-2998 | High | 8.8 | 2022-09-26 | Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI inter… |
CVE-2022-2859 | High | 8.8 | 2022-09-26 | Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions… |
CVE-2022-2858 | High | 8.8 | 2022-09-26 | Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI intera… |
CVE-2022-2855 | High | 8.8 | 2022-09-26 | Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2852 | High | 8.8 | 2022-09-26 | Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3297 | High | 7.8 | 2022-09-25 | Use After Free in GitHub repository vim/vim prior to 9.0.0579. |
CVE-2022-22628 | High | 8.8 | 2022-09-23 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS… |
CVE-2022-22624 | High | 8.8 | 2022-09-23 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 1… |
CVE-2022-3256 | High | 7.8 | 2022-09-22 | Use After Free in GitHub repository vim/vim prior to 9.0.0530. |
CVE-2022-41222 | High | 7.0 | 2022-09-21 | mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. |
CVE-2022-41218 | Medium | 5.5 | 2022-09-21 | In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dm… |
CVE-2022-40009 | Critical | 9.8 | 2022-09-20 | SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c. |
CVE-2022-3239 | High | 7.8 | 2022-09-19 | A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local u… |
CVE-2022-38425 | Medium | 5.5 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive me… |
CVE-2022-35709 | Medium | 5.5 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive me… |
CVE-2022-35704 | High | 7.8 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution… |
CVE-2022-3235 | High | 7.8 | 2022-09-18 | Use After Free in GitHub repository vim/vim prior to 9.0.0490. |
CVE-2022-38434 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execu… |
CVE-2022-38428 | Medium | 5.5 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitiv… |
CVE-2022-3176 | High | 7.8 | 2022-09-16 | There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will se… |
CVE-2022-25693 | High | 8.4 | 2022-09-16 | Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2022-22095 | High | 8.4 | 2022-09-16 | Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Comput… |
CVE-2022-22092 | High | 7.8 | 2022-09-16 | Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile |
CVE-2022-40639 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exp… |
CVE-2022-40638 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exp… |
CVE-2022-40637 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exp… |
CVE-2022-2977 | High | 7.8 | 2022-09-14 | A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not t… |
CVE-2022-40674 | High | 8.1 | 2022-09-14 | libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. |
CVE-2021-0697 | High | 7.0 | 2022-09-13 | In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2022-2979 | High | 7.8 | 2022-09-12 | Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution. |
CVE-2022-40133 | Medium | 6.3 | 2022-09-09 | A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with… |
CVE-2022-38457 | Medium | 6.3 | 2022-09-09 | A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with devic… |
CVE-2022-36855 | Medium | 4.4 | 2022-09-09 | A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. |
CVE-2022-36849 | Medium | 4.9 | 2022-09-09 | Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious act… |
CVE-2022-36847 | Medium | 4.9 | 2022-09-09 | Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions. |
CVE-2022-2526 | Critical | 9.8 | 2022-09-09 | A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-s… |
CVE-2022-3134 | High | 7.8 | 2022-09-06 | Use After Free in GitHub repository vim/vim prior to 9.0.0389. |
CVE-2022-26453 | Medium | 6.7 | 2022-09-06 | In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2022-3099 | High | 7.8 | 2022-09-03 | Use After Free in GitHub repository vim/vim prior to 9.0.0360. |
CVE-2022-22097 | High | 8.4 | 2022-09-02 | Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT |
CVE-2021-35133 | Medium | 6.7 | 2022-09-02 | Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdrago… |
CVE-2022-2738 | High | 7.5 | 2022-09-01 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for… |
CVE-2020-27784 | Medium | 5.5 | 2022-09-01 | A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev insta… |
CVE-2022-36449 | Medium | 6.5 | 2022-09-01 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed me… |
CVE-2022-2896 | High | 7.8 | 2022-08-31 | Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file. |
CVE-2022-1976 | High | 7.8 | 2022-08-31 | A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a string of requests… |
CVE-2022-1974 | Medium | 4.1 | 2022-08-31 | A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability al… |
CVE-2022-1205 | Medium | 4.7 | 2022-08-31 | A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This f… |
CVE-2022-3037 | High | 7.8 | 2022-08-30 | Use After Free in GitHub repository vim/vim prior to 9.0.0322. |
CVE-2022-2961 | High | 7.0 | 2022-08-29 | A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously t… |
CVE-2022-1204 | Medium | 5.5 | 2022-08-29 | A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows… |