CWE-416 · Use After Free (page 53)
Page 53 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1652 | High | 7.8 | 2022-06-02 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By… |
CVE-2022-1419 | High | 7.8 | 2022-06-02 | The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_cr… |
CVE-2021-42203 | High | 7.8 | 2022-06-02 | An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. I… |
CVE-2022-1934 | High | 7.8 | 2022-05-31 | Use After Free in GitHub repository mruby/mruby prior to 3.2. |
CVE-2022-1898 | High | 7.8 | 2022-05-27 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-26757 | High | 7.8 | 2022-05-26 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Cata… |
CVE-2022-26702 | High | 7.8 | 2022-05-26 | A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application m… |
CVE-2022-1882 | High | 7.8 | 2022-05-26 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free… |
CVE-2021-42614 | High | 7.8 | 2022-05-24 | A use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact… |
CVE-2021-42612 | High | 7.8 | 2022-05-24 | A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecified impact via a cr… |
CVE-2022-1796 | High | 7.8 | 2022-05-19 | Use After Free in GitHub repository vim/vim prior to 8.2.4979. |
CVE-2022-28350 | Critical | 9.8 | 2022-05-19 | Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation. |
CVE-2022-28349 | Critical | 9.8 | 2022-05-19 | Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through… |
CVE-2022-28348 | Critical | 9.8 | 2022-05-19 | Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper… |
CVE-2022-1734 | High | 7.0 | 2022-05-18 | A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized… |
CVE-2022-30065 | High | 7.8 | 2022-05-18 | A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar fun… |
CVE-2022-1795 | Critical | 9.8 | 2022-05-18 | Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV. |
CVE-2022-28192 | Medium | 4.1 | 2022-05-17 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of… |
CVE-2022-1679 | High | 7.8 | 2022-05-16 | A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail w… |
CVE-2022-22252 | High | 7.5 | 2022-05-13 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability. |
CVE-2022-29794 | Critical | 9.8 | 2022-05-13 | The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, an… |
CVE-2022-28824 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code exec… |
CVE-2022-28823 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code exec… |
CVE-2022-22260 | Critical | 9.1 | 2022-05-13 | The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. |
CVE-2021-40399 | High | 7.8 | 2022-05-12 | An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS file can cau… |
CVE-2022-28838 | High | 7.8 | 2022-05-11 | Acrobat Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerabi… |
CVE-2022-28837 | Medium | 5.5 | 2022-05-11 | Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability tha… |
CVE-2022-28269 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28256 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28250 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28242 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28240 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28238 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28237 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28235 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28233 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28232 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28230 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27802 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27801 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27800 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27799 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27797 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27796 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27795 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27790 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27789 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27786 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27785 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24104 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24103 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24102 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24101 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-1616 | High | 7.8 | 2022-05-07 | Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanis… |
CVE-2022-28279 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execut… |
CVE-2022-28271 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execut… |
CVE-2022-1516 | Medium | 5.5 | 2022-05-05 | A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their ses… |
CVE-2022-20091 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20090 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2021-3750 | High | 8.2 | 2022-05-02 | A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it… |
CVE-2022-1195 | Medium | 5.5 | 2022-04-29 | A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial… |
CVE-2022-1114 | High | 7.1 | 2022-04-29 | A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a spe… |
CVE-2022-1048 | High | 7.0 | 2022-04-29 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or simil… |
CVE-2022-1444 | Medium | 5.5 | 2022-04-23 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service. |
CVE-2021-42779 | Medium | 5.3 | 2022-04-18 | A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. |
CVE-2021-44497 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalcu… |
CVE-2022-28042 | High | 8.8 | 2022-04-15 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. |
CVE-2022-27007 | Critical | 9.8 | 2022-04-14 | nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame… |
CVE-2022-27457 | High | 7.5 | 2022-04-14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. |
CVE-2022-27456 | High | 7.5 | 2022-04-14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. |
CVE-2022-27455 | High | 7.5 | 2022-04-14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. |
CVE-2022-27447 | High | 7.5 | 2022-04-14 | MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. |
CVE-2022-1280 | Medium | 6.3 | 2022-04-13 | A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local u… |
CVE-2022-27383 | High | 7.5 | 2022-04-12 | MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL st… |
CVE-2022-27377 | High | 7.5 | 2022-04-12 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted… |
CVE-2022-27376 | High | 7.5 | 2022-04-12 | MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL… |
CVE-2022-24070 | High | 7.5 | 2022-04-12 | Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory whi… |
CVE-2021-39812 | High | 7.8 | 2022-04-12 | In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2021-39803 | Medium | 6.5 | 2022-04-12 | In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additi… |
CVE-2021-39801 | High | 7.8 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-39800 | Medium | 5.5 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no… |
CVE-2021-0707 | High | 7.8 | 2022-04-12 | In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2022-27834 | Low | 2.9 | 2022-04-11 | Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions. |
CVE-2022-27528 | High | 7.8 | 2022-04-11 | A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability ma… |
CVE-2022-25789 | High | 7.8 | 2022-04-11 | A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of t… |
CVE-2022-20062 | Medium | 6.7 | 2022-04-11 | In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-20052 | Medium | 6.5 | 2022-04-11 | In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-28893 | High | 7.8 | 2022-04-11 | The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state. |
CVE-2022-1284 | Medium | 5.5 | 2022-04-08 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. |
CVE-2022-27147 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag. |
CVE-2022-27046 | High | 8.8 | 2022-04-08 | libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388. |
CVE-2021-41715 | High | 8.8 | 2022-04-08 | libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379. |
CVE-2022-1212 | Critical | 9.8 | 2022-04-05 | Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. |
CVE-2022-0808 | High | 8.8 | 2022-04-05 | Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of u… |
CVE-2022-0805 | High | 8.8 | 2022-04-05 | Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction… |
CVE-2022-0798 | High | 8.8 | 2022-04-05 | Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-0796 | High | 8.8 | 2022-04-05 | Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0794 | High | 8.8 | 2022-04-05 | Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to pote… |
CVE-2022-0793 | High | 8.8 | 2022-04-05 | Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific… |