CWE-416 · Use After Free (page 60)
Page 60 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27799 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27797 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27796 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27795 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27790 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27789 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27786 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27785 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24104 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24103 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24102 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24101 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-1616 | High | 7.8 | 2022-05-07 | Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanis… |
CVE-2022-28279 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execut… |
CVE-2022-28271 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execut… |
CVE-2022-1516 | Medium | 5.5 | 2022-05-05 | A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their ses… |
CVE-2022-20091 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20090 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2021-3750 | High | 8.2 | 2022-05-02 | A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it… |
CVE-2022-1195 | Medium | 5.5 | 2022-04-29 | A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial… |
CVE-2022-1114 | High | 7.1 | 2022-04-29 | A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a spe… |
CVE-2022-1048 | High | 7.0 | 2022-04-29 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or simil… |
CVE-2022-1444 | Medium | 5.5 | 2022-04-23 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service. |
CVE-2021-42779 | Medium | 5.3 | 2022-04-18 | A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. |
CVE-2021-44497 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalcu… |
CVE-2022-28042 | High | 8.8 | 2022-04-15 | stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode. |
CVE-2022-27007 | Critical | 9.8 | 2022-04-14 | nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame… |
CVE-2022-27457 | High | 7.5 | 2022-04-14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. |
CVE-2022-27456 | High | 7.5 | 2022-04-14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. |
CVE-2022-27455 | High | 7.5 | 2022-04-14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. |
CVE-2022-27447 | High | 7.5 | 2022-04-14 | MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. |
CVE-2022-1280 | Medium | 6.3 | 2022-04-13 | A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local u… |
CVE-2022-27383 | High | 7.5 | 2022-04-12 | MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL st… |
CVE-2022-27377 | High | 7.5 | 2022-04-12 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted… |
CVE-2022-27376 | High | 7.5 | 2022-04-12 | MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL… |
CVE-2022-24070 | High | 7.5 | 2022-04-12 | Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory whi… |
CVE-2021-39812 | High | 7.8 | 2022-04-12 | In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2021-39803 | Medium | 6.5 | 2022-04-12 | In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additi… |
CVE-2021-39801 | High | 7.8 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-39800 | Medium | 5.5 | 2022-04-12 | In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no… |
CVE-2021-0707 | High | 7.8 | 2022-04-12 | In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2022-27834 | Low | 2.9 | 2022-04-11 | Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions. |
CVE-2022-27528 | High | 7.8 | 2022-04-11 | A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability ma… |
CVE-2022-25789 | High | 7.8 | 2022-04-11 | A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of t… |
CVE-2022-20062 | Medium | 6.7 | 2022-04-11 | In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-20052 | Medium | 6.5 | 2022-04-11 | In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-28893 | High | 7.8 | 2022-04-11 | The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state. |
CVE-2022-1284 | Medium | 5.5 | 2022-04-08 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. |
CVE-2022-27147 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag. |
CVE-2022-27046 | High | 8.8 | 2022-04-08 | libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388. |
CVE-2021-41715 | High | 8.8 | 2022-04-08 | libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379. |
CVE-2022-1212 | Critical | 9.8 | 2022-04-05 | Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. |
CVE-2022-0808 | High | 8.8 | 2022-04-05 | Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of u… |
CVE-2022-0805 | High | 8.8 | 2022-04-05 | Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction… |
CVE-2022-0798 | High | 8.8 | 2022-04-05 | Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-0796 | High | 8.8 | 2022-04-05 | Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0794 | High | 8.8 | 2022-04-05 | Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to pote… |
CVE-2022-0793 | High | 8.8 | 2022-04-05 | Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific… |
CVE-2022-0791 | High | 8.8 | 2022-04-05 | Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to pote… |
CVE-2022-0790 | Critical | 9.6 | 2022-04-05 | Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to poten… |
CVE-2022-0469 | High | 8.8 | 2022-04-05 | Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially… |
CVE-2022-0468 | High | 8.8 | 2022-04-05 | Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0465 | High | 8.8 | 2022-04-05 | Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction. |
CVE-2022-0464 | High | 8.8 | 2022-04-05 | Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
CVE-2022-0463 | High | 8.8 | 2022-04-05 | Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
CVE-2022-0460 | High | 8.8 | 2022-04-05 | Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2022-0459 | High | 8.8 | 2022-04-05 | Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user… |
CVE-2022-0458 | High | 8.8 | 2022-04-05 | Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2022-0456 | High | 8.8 | 2022-04-05 | Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction. |
CVE-2022-0453 | High | 8.8 | 2022-04-05 | Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2022-0452 | Critical | 9.6 | 2022-04-05 | Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag… |
CVE-2022-0609 | High | 8.8 | 2022-04-05 | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0607 | High | 8.8 | 2022-04-05 | Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0606 | High | 8.8 | 2022-04-05 | Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0605 | High | 8.8 | 2022-04-05 | Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced… |
CVE-2022-0603 | High | 8.8 | 2022-04-05 | Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2022-26417 | High | 7.8 | 2022-04-01 | Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an at… |
CVE-2021-35115 | High | 8.4 | 2022-04-01 | Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile |
CVE-2022-24791 | High | 8.1 | 2022-03-31 | Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that us… |
CVE-2021-39776 | High | 7.8 | 2022-03-30 | In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed… |
CVE-2022-1154 | High | 7.8 | 2022-03-30 | Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646. |
CVE-2022-1050 | High | 8.8 | 2022-03-29 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buf… |
CVE-2022-1055 | High | 7.8 | 2022-03-29 | A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged… |
CVE-2022-26291 | Medium | 5.5 | 2022-03-28 | lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability… |
CVE-2022-1106 | Critical | 9.1 | 2022-03-27 | use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. |
CVE-2022-1071 | High | 8.2 | 2022-03-26 | User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. |
CVE-2021-4203 | Medium | 6.8 | 2022-03-25 | A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Lin… |
CVE-2021-4202 | High | 7.0 | 2022-03-25 | A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attac… |
CVE-2021-4150 | Medium | 5.5 | 2022-03-23 | A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial… |
CVE-2021-3748 | High | 7.5 | 2022-03-23 | A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region… |
CVE-2022-1031 | High | 7.8 | 2022-03-22 | Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. |
CVE-2022-22669 | High | 7.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitra… |
CVE-2022-22667 | High | 7.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute ar… |
CVE-2022-22641 | Critical | 9.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An appli… |
CVE-2022-22620 | High | 8.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (… |
CVE-2022-22615 | High | 7.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Securit… |
CVE-2022-22614 | High | 7.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Securit… |
CVE-2022-22590 | High | 8.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, mac… |
CVE-2022-1011 | High | 7.8 | 2022-03-18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized ac… |