CWE-416 · Use After Free (page 52)
Page 52 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-33461 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c. |
CVE-2021-33453 | High | 7.8 | 2022-07-26 | An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538. |
CVE-2022-1313 | High | 8.8 | 2022-07-25 | Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1312 | Critical | 9.6 | 2022-07-25 | Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perf… |
CVE-2022-1311 | High | 8.8 | 2022-07-25 | Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2022-1310 | High | 8.8 | 2022-07-25 | Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2022-1308 | High | 8.8 | 2022-07-25 | Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1305 | High | 8.8 | 2022-07-25 | Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1145 | High | 7.5 | 2022-07-23 | Use after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-1144 | High | 8.8 | 2022-07-23 | Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potent… |
CVE-2022-1141 | High | 8.8 | 2022-07-23 | Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
CVE-2022-1136 | High | 8.8 | 2022-07-23 | Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
CVE-2022-1135 | High | 8.8 | 2022-07-23 | Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via standard feature u… |
CVE-2022-1133 | High | 8.8 | 2022-07-23 | Use after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1131 | High | 8.8 | 2022-07-23 | Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1127 | High | 8.8 | 2022-07-23 | Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interacti… |
CVE-2022-1125 | High | 8.8 | 2022-07-23 | Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to pote… |
CVE-2022-0980 | High | 8.8 | 2022-07-22 | Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2022-0979 | High | 8.8 | 2022-07-22 | Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user int… |
CVE-2022-0978 | High | 8.8 | 2022-07-22 | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2327 | High | 7.5 | 2022-07-22 | io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing… |
CVE-2022-0977 | Critical | 9.6 | 2022-07-21 | Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user inte… |
CVE-2022-0975 | High | 8.8 | 2022-07-21 | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0974 | High | 8.8 | 2022-07-21 | Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user int… |
CVE-2022-0973 | Critical | 9.6 | 2022-07-21 | Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0972 | High | 8.8 | 2022-07-21 | Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
CVE-2022-0971 | High | 8.8 | 2022-07-21 | Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentia… |
CVE-2022-31146 | Medium | 6.4 | 2022-07-21 | Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be inco… |
CVE-2020-36557 | Medium | 5.1 | 2022-07-21 | A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. |
CVE-2022-22207 | High | 7.5 | 2022-07-20 | A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Junos OS allows an unauthenticated networ… |
CVE-2022-21540 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are… |
CVE-2022-2453 | High | 7.8 | 2022-07-19 | Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV. |
CVE-2022-28683 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28680 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28679 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28678 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28677 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28676 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28675 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28674 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28673 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28672 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28671 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28669 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-34243 | High | 7.8 | 2022-07-15 | Adobe Photoshop versions 22.5.7 (and earlier) and 23.3.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execu… |
CVE-2022-34237 | Medium | 5.5 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34234 | Medium | 5.5 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34233 | Medium | 5.5 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34232 | Medium | 5.5 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34230 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34229 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34225 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34223 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34220 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34219 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34216 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-32317 | Medium | 5.5 | 2022-07-14 | The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2.c. This vulnerabil… |
CVE-2022-20228 | Medium | 6.5 | 2022-07-13 | In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote information disclosure… |
CVE-2022-22034 | High | 7.8 | 2022-07-12 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-2345 | High | 7.8 | 2022-07-08 | Use After Free in GitHub repository vim/vim prior to 9.0.0046. |
CVE-2022-2318 | Medium | 5.5 | 2022-07-06 | There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privi… |
CVE-2022-2289 | High | 7.8 | 2022-07-03 | Use After Free in GitHub repository vim/vim prior to 9.0. |
CVE-2022-32091 | High | 7.5 | 2022-07-01 | MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc. |
CVE-2022-32081 | High | 7.5 | 2022-07-01 | MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc. |
CVE-2022-33027 | High | 7.8 | 2022-06-23 | LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c. |
CVE-2022-33025 | High | 7.8 | 2022-06-23 | LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c. |
CVE-2022-27868 | High | 7.8 | 2022-06-21 | A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to cod… |
CVE-2022-27867 | High | 7.8 | 2022-06-21 | A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerabilit… |
CVE-2022-32414 | Medium | 5.5 | 2022-06-21 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vmcode.c. |
CVE-2022-31307 | Medium | 5.5 | 2022-06-21 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.c. |
CVE-2022-31306 | Medium | 5.5 | 2022-06-21 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at src/njs_array.c. |
CVE-2021-41682 | High | 7.8 | 2022-06-20 | There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.0 |
CVE-2022-33981 | Low | 3.3 | 2022-06-18 | drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating… |
CVE-2022-21806 | Critical | 9.8 | 2022-06-17 | A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network p… |
CVE-2022-27512 | Medium | 5.3 | 2022-06-16 | Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. |
CVE-2022-30657 | High | 7.8 | 2022-06-16 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution… |
CVE-2022-30655 | High | 7.8 | 2022-06-16 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution… |
CVE-2022-30648 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-30647 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-28849 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context o… |
CVE-2022-28842 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context o… |
CVE-2022-20185 | Medium | 6.7 | 2022-06-15 | In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User interacti… |
CVE-2022-20141 | High | 7.0 | 2022-06-15 | In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and clo… |
CVE-2022-21504 | Medium | 5.5 | 2022-06-14 | The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socke… |
CVE-2022-22090 | High | 8.4 | 2022-06-14 | Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile |
CVE-2022-22071 | High | 8.4 | 2022-06-14 | Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Com… |
CVE-2022-22068 | High | 8.4 | 2022-06-14 | kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2021-35130 | High | 8.4 | 2022-06-14 | Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2021-35120 | Medium | 6.7 | 2022-06-14 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30334 | High | 8.4 | 2022-06-14 | Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2022-29522 | High | 7.8 | 2022-06-14 | Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to… |
CVE-2022-2042 | High | 7.8 | 2022-06-10 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-29228 | High | 7.5 | 2022-06-09 | Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitt… |
CVE-2022-29227 | High | 7.5 | 2022-06-09 | Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to send an internal redirect of an HTTP reque… |
CVE-2022-1998 | High | 7.8 | 2022-06-09 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event… |
CVE-2022-21745 | High | 8.8 | 2022-06-06 | In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting… |
CVE-2022-32250 | High | 7.8 | 2022-06-02 | net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root becaus… |
CVE-2022-29692 | High | 7.8 | 2022-06-02 | Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function. |
CVE-2022-1968 | High | 7.8 | 2022-06-02 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1786 | High | 7.8 | 2022-06-02 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task comp… |