CWE-416 · Use After Free (page 62)
Page 62 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22808 | High | 7.8 | 2022-01-28 | A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon to… |
CVE-2021-46525 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c. |
CVE-2021-46503 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Ser… |
CVE-2021-46502 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5166d. This vulnerability can lead to a Denial of Ser… |
CVE-2021-46501 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46500 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46499 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46498 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Servi… |
CVE-2021-46497 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src/jsiUserObj.c. This vulnerability can lead to a Denial of Service (DoS… |
CVE-2021-46496 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_ObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46495 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46494 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueLookupBase in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS… |
CVE-2021-46489 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_DecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46484 | Medium | 5.5 | 2022-01-27 | Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_IncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46242 | High | 8.8 | 2022-01-21 | HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. |
CVE-2021-46239 | Medium | 5.5 | 2022-01-21 | The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can l… |
CVE-2021-34403 | High | 7.8 | 2022-01-18 | NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to… |
CVE-2021-4083 | High | 7.0 | 2022-01-18 | A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget()… |
CVE-2021-46170 | High | 7.5 | 2022-01-14 | An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file. |
CVE-2021-46169 | Medium | 5.5 | 2022-01-14 | Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache. |
CVE-2021-46022 | Medium | 5.5 | 2022-01-14 | An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash. |
CVE-2021-46021 | Medium | 5.5 | 2022-01-14 | An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash. |
CVE-2021-45064 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-45063 | Medium | 5.5 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-45062 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-45051 | Low | 3.3 | 2022-01-14 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an use-after-free vulnerability in the processing of Format event acti… |
CVE-2021-44713 | Medium | 5.5 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-44710 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-44706 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-44705 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-44704 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-44701 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2021-39681 | High | 7.8 | 2022-01-14 | In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no ad… |
CVE-2021-39679 | High | 7.0 | 2022-01-14 | In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2021-39634 | High | 7.8 | 2022-01-14 | In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User in… |
CVE-2021-39629 | High | 7.0 | 2022-01-14 | In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privil… |
CVE-2021-39620 | High | 7.8 | 2022-01-14 | In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with… |
CVE-2021-34939 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34937 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34936 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34933 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34931 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34922 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34919 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34917 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34911 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34909 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34908 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34906 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34895 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34894 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34891 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34886 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34884 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34879 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34872 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-45059 | Low | 3.3 | 2022-01-13 | Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of s… |
CVE-2021-45054 | Low | 3.3 | 2022-01-13 | Adobe InCopy version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sen… |
CVE-2021-30313 | Medium | 6.7 | 2022-01-13 | Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2021-40566 | Medium | 5.5 | 2022-01-12 | A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using… |
CVE-2021-36408 | Medium | 5.5 | 2022-01-10 | An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265. |
CVE-2022-0156 | Medium | 5.5 | 2022-01-10 | vim is vulnerable to Use After Free |
CVE-2021-46142 | Medium | 5.5 | 2022-01-06 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. |
CVE-2021-46141 | Medium | 5.5 | 2022-01-06 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner. |
CVE-2021-41043 | Medium | 5.5 | 2022-01-05 | Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. |
CVE-2021-30337 | High | 8.4 | 2022-01-03 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2021-30262 | High | 8.4 | 2022-01-03 | Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-45944 | Medium | 5.5 | 2022-01-01 | Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). |
CVE-2021-4192 | High | 7.8 | 2021-12-31 | vim is vulnerable to Use After Free |
CVE-2021-4187 | High | 7.8 | 2021-12-29 | vim is vulnerable to Use After Free |
CVE-2021-4173 | High | 7.8 | 2021-12-27 | vim is vulnerable to Use After Free |
CVE-2021-45702 | High | 7.5 | 2021-12-27 | An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free. |
CVE-2021-45701 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free. |
CVE-2018-25028 | High | 7.5 | 2021-12-27 | An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_context can cause a use-after-free. |
CVE-2018-25027 | High | 7.5 | 2021-12-27 | An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free. |
CVE-2021-45720 | High | 7.5 | 2021-12-26 | An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation. |
CVE-2021-45719 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a use-after-free. |
CVE-2021-45718 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollback_hook has a use-after-free. |
CVE-2021-45717 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commit_hook has a use-after-free. |
CVE-2021-45716 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_collation has a use-after-free. |
CVE-2021-45715 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a use-after-free. |
CVE-2021-45714 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_aggregate_function has a use-after-free. |
CVE-2021-45713 | High | 7.5 | 2021-12-26 | An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_scalar_function has a use-after-free. |
CVE-2021-45483 | Medium | 6.5 | 2021-12-25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889. |
CVE-2021-45482 | Medium | 6.5 | 2021-12-25 | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889. |
CVE-2020-3886 | High | 7.8 | 2021-12-23 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security… |
CVE-2021-4067 | High | 8.8 | 2021-12-23 | Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4065 | High | 8.8 | 2021-12-23 | Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4064 | High | 8.8 | 2021-12-23 | Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4063 | High | 8.8 | 2021-12-23 | Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-4057 | High | 8.8 | 2021-12-23 | Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea… |
CVE-2021-4053 | High | 8.8 | 2021-12-23 | Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4052 | High | 8.8 | 2021-12-23 | Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
CVE-2021-38011 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-38008 | High | 8.8 | 2021-12-23 | Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38006 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-38005 | High | 8.8 | 2021-12-23 | Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-45263 | Medium | 5.5 | 2021-12-22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash. |
CVE-2021-45262 | Medium | 5.5 | 2021-12-22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash. |
CVE-2021-45291 | Medium | 5.5 | 2021-12-21 | The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4… |