CWE-416 · Use After Free (page 52)
Page 52 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2762 | High | 7.8 | 2023-07-12 | A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This… |
CVE-2023-35351 | Medium | 6.6 | 2023-07-11 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability |
CVE-2023-35323 | High | 7.8 | 2023-07-11 | Windows OLE Remote Code Execution Vulnerability |
CVE-2023-35313 | High | 7.8 | 2023-07-11 | Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability |
CVE-2023-35300 | High | 8.8 | 2023-07-11 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-33153 | Medium | 6.8 | 2023-07-11 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-33149 | High | 7.8 | 2023-07-11 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2023-32055 | Medium | 6.7 | 2023-07-11 | Active Template Library Elevation of Privilege Vulnerability |
CVE-2023-32038 | High | 8.8 | 2023-07-11 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-32033 | Medium | 6.6 | 2023-07-11 | Microsoft Failover Cluster Remote Code Execution Vulnerability |
CVE-2023-21756 | High | 7.8 | 2023-07-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-3269 | High | 7.8 | 2023-07-11 | A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is inco… |
CVE-2023-1902 | Medium | 5.9 | 2023-07-10 | The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to… |
CVE-2021-32495 | Critical | 10.0 | 2023-07-07 | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to ca… |
CVE-2021-33796 | Critical | 10.0 | 2023-07-07 | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. |
CVE-2023-29824 | Critical | 9.8 | 2023-07-06 | A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not… |
CVE-2023-37454 | Medium | 5.5 | 2023-07-06 | An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_… |
CVE-2022-48512 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perfor… |
CVE-2022-48511 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio featu… |
CVE-2021-46894 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation. |
CVE-2023-31248 | High | 7.8 | 2023-07-05 | Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET… |
CVE-2023-37209 | High | 8.8 | 2023-07-05 | A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. T… |
CVE-2023-37202 | High | 8.8 | 2023-07-05 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-… |
CVE-2023-37201 | High | 8.8 | 2023-07-05 | An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR… |
CVE-2023-21672 | High | 8.4 | 2023-07-04 | Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions. |
CVE-2023-3439 | Medium | 4.7 | 2023-06-28 | A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. Howe… |
CVE-2023-3390 | High | 7.8 | 2023-06-28 | A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NE… |
CVE-2023-3389 | High | 7.8 | 2023-06-28 | A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll re… |
CVE-2023-21147 | High | 7.8 | 2023-06-28 | In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2023-21146 | Medium | 6.7 | 2023-06-28 | there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-25002 | High | 7.8 | 2023-06-27 | A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execut… |
CVE-2023-25001 | High | 7.8 | 2023-06-27 | A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lea… |
CVE-2023-3422 | High | 8.8 | 2023-06-26 | Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-3421 | High | 8.8 | 2023-06-26 | Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-3317 | High | 7.1 | 2023-06-23 | A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the… |
CVE-2023-32412 | Critical | 9.8 | 2023-06-23 | A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS… |
CVE-2023-32398 | High | 7.8 | 2023-06-23 | A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS… |
CVE-2023-32387 | Critical | 9.8 | 2023-06-23 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. A… |
CVE-2023-32373 | High | 8.8 | 2023-06-23 | A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS… |
CVE-2022-22630 | Critical | 9.8 | 2023-06-23 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-00… |
CVE-2023-34241 | Medium | 5.3 | 2023-06-22 | OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to ver… |
CVE-2023-20893 | High | 8.1 | 2023-06-22 | The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCente… |
CVE-2023-1999 | Medium | 5.3 | 2023-06-20 | There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best… |
CVE-2023-25747 | High | 7.5 | 2023-06-19 | A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox f… |
CVE-2023-35829 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c. |
CVE-2023-35828 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c. |
CVE-2023-35827 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. |
CVE-2023-35826 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. |
CVE-2023-35824 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c. |
CVE-2023-35823 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c. |
CVE-2023-28287 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2023-35784 | Critical | 9.8 | 2023-06-16 | A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x… |
CVE-2023-34475 | Medium | 5.5 | 2023-06-16 | A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a speciall… |
CVE-2023-34795 | High | 7.8 | 2023-06-16 | xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows atta… |
CVE-2023-29356 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-29321 | High | 7.8 | 2023-06-15 | Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code executi… |
CVE-2023-21120 | High | 7.8 | 2023-06-15 | In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no a… |
CVE-2023-21108 | High | 8.8 | 2023-06-15 | In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Blue… |
CVE-2023-21101 | High | 7.0 | 2023-06-15 | In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2023-33128 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-32018 | High | 7.8 | 2023-06-14 | Windows Hello Remote Code Execution Vulnerability |
CVE-2023-29365 | High | 7.8 | 2023-06-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-29361 | High | 7.0 | 2023-06-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-29358 | High | 7.8 | 2023-06-14 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-3217 | High | 8.8 | 2023-06-13 | Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-3215 | High | 8.8 | 2023-06-13 | Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-3214 | High | 8.8 | 2023-06-13 | Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2023-3159 | Medium | 6.7 | 2023-06-12 | A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privil… |
CVE-2023-34494 | High | 7.5 | 2023-06-12 | NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c. |
CVE-2023-3141 | High | 7.1 | 2023-06-09 | A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash… |
CVE-2023-33657 | High | 7.5 | 2023-06-08 | A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_mqtt_msg_get_publish_property() in the f… |
CVE-2023-33595 | Medium | 5.5 | 2023-06-07 | CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. |
CVE-2023-30576 | Medium | 6.8 | 2023-06-07 | Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbi… |
CVE-2023-28653 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-… |
CVE-2023-20744 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User… |
CVE-2022-33263 | Medium | 6.7 | 2023-06-06 | Memory corruption due to use after free in Core when multiple DCI clients register and deregister. |
CVE-2023-3111 | High | 7.8 | 2023-06-05 | A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by c… |
CVE-2023-29543 | High | 8.8 | 2023-06-02 | An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerabil… |
CVE-2023-29536 | High | 8.8 | 2023-06-02 | An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruptio… |
CVE-2023-25739 | High | 8.8 | 2023-06-02 | Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. Th… |
CVE-2023-25735 | High | 8.8 | 2023-06-02 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-… |
CVE-2023-28469 | Medium | 5.5 | 2023-06-02 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed me… |
CVE-2023-2985 | Medium | 5.5 | 2023-06-01 | A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service… |
CVE-2023-2598 | High | 7.8 | 2023-06-01 | A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds a… |
CVE-2023-2933 | High | 8.8 | 2023-05-30 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
CVE-2023-2932 | High | 8.8 | 2023-05-30 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
CVE-2023-2931 | High | 8.8 | 2023-05-30 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
CVE-2023-2930 | High | 8.8 | 2023-05-30 | Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2023-28319 | High | 7.5 | 2023-05-26 | A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this… |
CVE-2023-31518 | Medium | 5.5 | 2023-05-23 | A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file. |
CVE-2023-33288 | Medium | 4.7 | 2023-05-22 | An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allo… |
CVE-2020-36694 | Medium | 6.7 | 2023-05-21 | An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU seque… |
CVE-2023-33250 | Medium | 4.4 | 2023-05-21 | The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c. |
CVE-2023-30470 | Critical | 9.8 | 2023-05-18 | A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f737ebb9d9810633502f65… |
CVE-2023-28081 | Critical | 9.8 | 2023-05-18 | A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary co… |
CVE-2023-24833 | High | 7.5 | 2023-05-18 | A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw… |
CVE-2023-1195 | Medium | 5.5 | 2023-05-18 | A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free p… |
CVE-2023-1859 | Medium | 4.7 | 2023-05-17 | A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local at… |
CVE-2023-2203 | High | 8.8 | 2023-05-17 | A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with netwo… |
CVE-2023-31725 | Medium | 5.5 | 2023-05-17 | yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c. |