CWE-416 · Use After Free (page 55)
Page 55 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21795 | High | 8.3 | 2023-01-24 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2021-33641 | High | 7.8 | 2023-01-20 | When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free). |
CVE-2022-45748 | High | 8.8 | 2023-01-20 | An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/Col… |
CVE-2023-21608 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2023-21601 | Medium | 5.5 | 2023-01-18 | Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2023-0358 | High | 7.8 | 2023-01-18 | Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2022-41858 | High | 7.1 | 2023-01-17 | A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/sl… |
CVE-2022-46891 | High | 8.8 | 2023-01-17 | An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain… |
CVE-2023-21598 | Medium | 5.5 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory… |
CVE-2023-22402 | Medium | 5.9 | 2023-01-13 | A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Servic… |
CVE-2022-3977 | High | 7.8 | 2023-01-12 | A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously… |
CVE-2022-4696 | High | 7.8 | 2023-01-11 | There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_W… |
CVE-2023-21784 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21774 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21773 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21755 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21747 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21735 | High | 7.8 | 2023-01-10 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-21734 | High | 7.8 | 2023-01-10 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-21724 | High | 7.8 | 2023-01-10 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2023-21680 | High | 7.8 | 2023-01-10 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-21679 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21674 | High | 8.8 | 2023-01-10 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2023-21552 | High | 7.8 | 2023-01-10 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-21551 | High | 7.8 | 2023-01-10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
CVE-2023-21532 | High | 7.0 | 2023-01-10 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2022-4382 | Medium | 6.4 | 2023-01-10 | A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device th… |
CVE-2022-4379 | High | 7.5 | 2023-01-10 | A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial |
CVE-2023-0135 | High | 8.8 | 2023-01-10 | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
CVE-2023-0134 | High | 8.8 | 2023-01-10 | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
CVE-2023-0128 | High | 8.8 | 2023-01-10 | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI in… |
CVE-2022-25722 | Medium | 6.0 | 2023-01-09 | Information exposure in DSP services due to improper handling of freeing memory |
CVE-2022-47093 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid |
CVE-2022-3863 | Medium | 6.1 | 2023-01-02 | Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-3842 | High | 7.5 | 2023-01-02 | Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2022-2742 | High | 8.8 | 2023-01-02 | Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2019-13768 | High | 7.4 | 2023-01-02 | Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Ch… |
CVE-2019-25085 | Medium | 6.3 | 2022-12-26 | A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder… |
CVE-2022-47946 | Medium | 5.5 | 2022-12-23 | An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kern… |
CVE-2022-47939 | Critical | 9.8 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT. |
CVE-2022-46882 | Critical | 9.8 | 2022-12-22 | A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6, and Thun… |
CVE-2022-46880 | Medium | 6.5 | 2022-12-22 | A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on December 13t… |
CVE-2022-45409 | High | 8.8 | 2022-12-22 | The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a u… |
CVE-2022-45407 | High | 7.5 | 2022-12-22 | If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable c… |
CVE-2022-45406 | Critical | 9.8 | 2022-12-22 | If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. Thi… |
CVE-2022-45405 | Medium | 6.5 | 2022-12-22 | Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This… |
CVE-2022-40960 | Medium | 6.5 | 2022-12-22 | Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a potentially exploitable crash. This vul… |
CVE-2022-38476 | High | 7.5 | 2022-12-22 | A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the… |
CVE-2022-34484 | High | 8.8 | 2022-12-22 | The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and we presum… |
CVE-2022-34470 | Critical | 9.8 | 2022-12-22 | Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox < 102, Firefox ESR < 91.11… |
CVE-2022-31747 | Critical | 9.8 | 2022-12-22 | Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9… |
CVE-2022-28282 | Medium | 6.5 | 2022-12-22 | By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript execution and then re… |
CVE-2022-26486 | Critical | 9.6 | 2022-12-22 | An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abu… |
CVE-2022-26485 | High | 8.8 | 2022-12-22 | Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. Th… |
CVE-2022-26385 | Medium | 6.5 | 2022-12-22 | In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to a use-after-free causing a potentially… |
CVE-2022-26381 | High | 8.8 | 2022-12-22 | An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects… |
CVE-2022-22740 | High | 8.8 | 2022-12-22 | Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially ex… |
CVE-2022-1196 | Medium | 6.5 | 2022-12-22 | After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnera… |
CVE-2022-1097 | Medium | 6.5 | 2022-12-22 | <code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-fre… |
CVE-2021-4128 | Medium | 6.5 | 2022-12-22 | When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentially exploitable c… |
CVE-2022-46282 | High | 7.8 | 2022-12-21 | Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file, |
CVE-2022-46311 | High | 7.5 | 2022-12-20 | The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity. |
CVE-2021-33640 | Medium | 6.2 | 2022-12-19 | After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: fre… |
CVE-2022-42520 | Medium | 6.7 | 2022-12-16 | In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System ex… |
CVE-2022-20581 | Medium | 6.7 | 2022-12-16 | In the Pixel camera driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System e… |
CVE-2022-20571 | Medium | 6.7 | 2022-12-16 | In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of pr… |
CVE-2022-20568 | High | 7.8 | 2022-12-16 | In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2022-20566 | High | 7.8 | 2022-12-16 | In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additiona… |
CVE-2022-20561 | High | 7.8 | 2022-12-16 | In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2022-20554 | Medium | 6.7 | 2022-12-16 | In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System… |
CVE-2022-20552 | Medium | 5.5 | 2022-12-16 | In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disc… |
CVE-2022-20540 | High | 7.8 | 2022-12-16 | In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of pri… |
CVE-2022-20524 | High | 7.8 | 2022-12-16 | In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no addi… |
CVE-2022-20514 | Medium | 6.7 | 2022-12-16 | In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out of bounds w… |
CVE-2022-42867 | High | 8.8 | 2022-12-15 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16… |
CVE-2022-4283 | High | 7.8 | 2022-12-14 | A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bo… |
CVE-2022-46343 | High | 8.8 | 2022-12-14 | A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has bee… |
CVE-2022-46342 | High | 8.8 | 2022-12-14 | A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been f… |
CVE-2022-4440 | High | 8.8 | 2022-12-14 | Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2022-4439 | High | 8.8 | 2022-12-14 | Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactio… |
CVE-2022-4438 | High | 8.8 | 2022-12-14 | Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions… |
CVE-2022-4437 | High | 8.8 | 2022-12-14 | Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2022-4436 | High | 8.8 | 2022-12-14 | Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2022-44683 | High | 7.8 | 2022-12-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-41285 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-25677 | Medium | 6.7 | 2022-12-13 | Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… |
CVE-2022-20502 | Medium | 5.5 | 2022-12-13 | In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with n… |
CVE-2022-20496 | Medium | 5.5 | 2022-12-13 | In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information di… |
CVE-2022-42716 | High | 8.8 | 2022-12-12 | An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain… |
CVE-2022-43508 | High | 7.8 | 2022-12-07 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a u… |
CVE-2022-42754 | Medium | 5.5 | 2022-12-06 | In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel. |
CVE-2022-35254 | High | 7.5 | 2022-12-05 | An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R1… |
CVE-2022-42705 | Medium | 6.5 | 2022-12-05 | A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Aste… |
CVE-2022-4292 | High | 7.8 | 2022-12-05 | Use After Free in GitHub repository vim/vim prior to 9.0.0882. |
CVE-2022-3591 | High | 7.8 | 2022-12-02 | Use After Free in GitHub repository vim/vim prior to 9.0.0789. |
CVE-2022-4194 | High | 8.8 | 2022-11-30 | Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-4192 | High | 8.8 | 2022-11-30 | Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to p… |
CVE-2022-4191 | High | 8.8 | 2022-11-30 | Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potent… |
CVE-2022-4181 | High | 8.8 | 2022-11-30 | Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2022-4180 | High | 8.8 | 2022-11-30 | Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |