CWE-416 · Use After Free (page 57)
Page 57 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6492 | Critical | 9.6 | 2021-11-02 | Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2021-37993 | High | 8.8 | 2021-11-02 | Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-37988 | High | 8.8 | 2021-11-02 | Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to potentially… |
CVE-2021-37987 | High | 8.8 | 2021-11-02 | Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37985 | High | 8.8 | 2021-11-02 | Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potential… |
CVE-2021-37983 | High | 8.8 | 2021-11-02 | Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37982 | High | 8.8 | 2021-11-02 | Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37977 | High | 8.8 | 2021-11-02 | Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-30809 | High | 8.8 | 2021-10-28 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing ma… |
CVE-2021-22466 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash. |
CVE-2021-22463 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Use After Free vulnerability . Local attackers may exploit this vulnerability to cause Kernel Information disclosure. |
CVE-2021-43057 | High | 7.8 | 2021-10-28 | An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be use… |
CVE-2021-40125 | Medium | 5.3 | 2021-10-27 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat De… |
CVE-2021-37122 | Medium | 6.5 | 2021-10-27 | There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation… |
CVE-2021-0941 | Medium | 6.7 | 2021-10-25 | In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with Syste… |
CVE-2021-0936 | High | 7.8 | 2021-10-25 | In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2021-0935 | Medium | 6.7 | 2021-10-25 | In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System exec… |
CVE-2021-0703 | Medium | 6.8 | 2021-10-22 | In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the a… |
CVE-2021-0483 | High | 7.8 | 2021-10-22 | In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User ex… |
CVE-2021-38467 | High | 7.3 | 2021-10-22 | A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed… |
CVE-2021-30315 | High | 8.4 | 2021-10-20 | Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto |
CVE-2021-3455 | Medium | 4.3 | 2021-10-19 | Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions >= 2.4.0, >= 2.5.0 contain Use After Free (CWE-416). For more informa… |
CVE-2021-38438 | High | 7.8 | 2021-10-18 | A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, whic… |
CVE-2021-21796 | High | 7.8 | 2021-10-18 | An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an object containi… |
CVE-2021-40730 | Low | 3.3 | 2021-10-15 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected… |
CVE-2021-40728 | High | 7.8 | 2021-10-15 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected… |
CVE-2021-40449 | High | 7.8 | 2021-10-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-21941 | Critical | 9.0 | 2021-10-12 | A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network pac… |
CVE-2021-37975 | High | 8.8 | 2021-10-08 | Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37974 | High | 8.8 | 2021-10-08 | Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2021-37973 | Critical | 9.6 | 2021-10-08 | Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sa… |
CVE-2021-37970 | High | 8.8 | 2021-10-08 | Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-37962 | High | 8.8 | 2021-10-08 | Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2021-37961 | High | 8.8 | 2021-10-08 | Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37959 | High | 8.8 | 2021-10-08 | Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potenti… |
CVE-2021-37957 | High | 8.8 | 2021-10-08 | Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37956 | High | 8.8 | 2021-10-08 | Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potential… |
CVE-2021-30633 | Critical | 9.6 | 2021-10-08 | Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perfo… |
CVE-2021-30629 | High | 8.8 | 2021-10-08 | Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2021-30625 | High | 8.8 | 2021-10-08 | Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potent… |
CVE-2020-22617 | Critical | 9.8 | 2021-10-08 | Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext. |
CVE-2021-40726 | High | 7.8 | 2021-10-07 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-40725 | High | 7.8 | 2021-10-07 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-22930 | Critical | 9.8 | 2021-10-07 | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to chang… |
CVE-2021-0695 | Medium | 5.5 | 2021-10-06 | In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with User exe… |
CVE-2021-0684 | High | 7.8 | 2021-10-06 | In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of priv… |
CVE-2021-39842 | High | 7.8 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-39840 | High | 7.8 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-39839 | High | 7.8 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-39838 | High | 7.8 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-39837 | High | 7.8 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-39836 | High | 7.8 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnera… |
CVE-2021-39835 | Medium | 4.3 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a use-after-free vulnerability in the processing… |
CVE-2021-41540 | High | 7.8 | 2021-09-28 | A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while par… |
CVE-2021-41539 | High | 7.8 | 2021-09-28 | A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while par… |
CVE-2021-41537 | High | 7.8 | 2021-09-28 | A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while par… |
CVE-2021-41536 | High | 7.8 | 2021-09-28 | A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while par… |
CVE-2021-41535 | High | 7.8 | 2021-09-28 | A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2… |
CVE-2021-0612 | High | 7.8 | 2021-09-27 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0611 | High | 7.8 | 2021-09-27 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2020-21913 | Medium | 5.5 | 2021-09-20 | International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file to… |
CVE-2021-39216 | Medium | 6.3 | 2021-09-17 | Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug when passin… |
CVE-2021-39228 | Medium | 6.5 | 2021-09-17 | Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Iss… |
CVE-2021-1976 | Critical | 9.8 | 2021-09-17 | A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1947 | High | 8.4 | 2021-09-17 | Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industr… |
CVE-2021-3796 | High | 7.3 | 2021-09-15 | vim is vulnerable to Use After Free |
CVE-2021-38656 | High | 7.8 | 2021-09-15 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2021-38655 | High | 7.8 | 2021-09-15 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-37202 | High | 7.8 | 2021-09-14 | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected applica… |
CVE-2021-1963 | Medium | 6.7 | 2021-09-09 | Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-30683 | High | 7.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Up… |
CVE-2021-30661 | High | 8.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tv… |
CVE-2021-1876 | High | 8.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Up… |
CVE-2021-1864 | Critical | 9.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with… |
CVE-2021-30802 | High | 8.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, tvOS 14.7. Processing maliciously crafted web content ma… |
CVE-2021-30795 | High | 8.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14… |
CVE-2021-30762 | High | 8.8 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to… |
CVE-2021-30741 | High | 7.1 | 2021-09-08 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted mail me… |
CVE-2021-30624 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30624 Use after free in Autofill |
CVE-2021-30623 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30623 Use after free in Bookmarks |
CVE-2021-30622 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
CVE-2021-30616 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30616 Use after free in Media |
CVE-2021-30613 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30613 Use after free in Base internals |
CVE-2021-30612 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30612 Use after free in WebRTC |
CVE-2021-30611 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30611 Use after free in WebRTC |
CVE-2021-30610 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30610 Use after free in Extensions API |
CVE-2021-30609 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30609 Use after free in Sign-In |
CVE-2021-30608 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30608 Use after free in Web Share |
CVE-2021-30607 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30607 Use after free in Permissions |
CVE-2021-30606 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30606 Use after free in Blink |
CVE-2021-28553 | High | 8.8 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Fr… |
CVE-2021-28550 | High | 8.8 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Fre… |
CVE-2021-36055 | High | 7.8 | 2021-09-01 | XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2021-30604 | High | 8.8 | 2021-08-26 | Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30602 | High | 8.8 | 2021-08-26 | Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit h… |
CVE-2021-30601 | High | 8.8 | 2021-08-26 | Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2021-30600 | High | 8.8 | 2021-08-26 | Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2021-30597 | Medium | 6.8 | 2021-08-26 | Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical ac… |
CVE-2021-30594 | Medium | 6.8 | 2021-08-26 | Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to… |
CVE-2021-30591 | High | 8.8 | 2021-08-26 | Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |