CWE-416 · Use After Free (page 66)
Page 66 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0482 | High | 7.0 | 2021-06-11 | In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with n… |
CVE-2021-0475 | High | 8.8 | 2021-06-11 | In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead to remote code execution over Bluetoot… |
CVE-2021-22901 | High | 8.1 | 2021-06-11 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over… |
CVE-2021-22759 | High | 7.8 | 2021-06-11 | A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution d… |
CVE-2021-25394 | Medium | 6.4 | 2021-06-11 | A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compr… |
CVE-2021-26199 | Medium | 6.5 | 2021-06-10 | An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file. |
CVE-2021-26194 | Medium | 6.5 | 2021-06-10 | An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file. |
CVE-2020-23302 | Critical | 9.8 | 2021-06-10 | There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0 |
CVE-2021-27347 | Medium | 5.5 | 2021-06-10 | Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) via a crafted compressed file. |
CVE-2021-1900 | High | 8.4 | 2021-06-09 | Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2020-11262 | High | 7.0 | 2021-06-09 | A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon… |
CVE-2020-11250 | High | 7.0 | 2021-06-09 | Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… |
CVE-2020-11239 | High | 7.8 | 2021-06-09 | Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdr… |
CVE-2021-30543 | High | 8.8 | 2021-06-07 | Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2021-30542 | High | 8.8 | 2021-06-07 | Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2021-30529 | High | 8.8 | 2021-06-07 | Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2021-30528 | High | 8.8 | 2021-06-07 | Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a u… |
CVE-2021-30527 | High | 8.8 | 2021-06-07 | Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
CVE-2021-30525 | High | 8.8 | 2021-06-07 | Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2021-30524 | High | 8.8 | 2021-06-07 | Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
CVE-2021-30523 | High | 8.8 | 2021-06-07 | Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet. |
CVE-2021-30522 | High | 8.8 | 2021-06-07 | Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-36387 | High | 7.8 | 2021-06-07 | An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6… |
CVE-2019-25045 | High | 7.8 | 2021-06-07 | An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46. |
CVE-2018-25015 | High | 7.8 | 2021-06-07 | An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058… |
CVE-2020-36385 | High | 7.8 | 2021-06-07 | An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in som… |
CVE-2021-30520 | High | 8.8 | 2021-06-04 | Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
CVE-2021-30519 | High | 8.8 | 2021-06-04 | Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially… |
CVE-2021-30515 | High | 8.8 | 2021-06-04 | Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30514 | High | 8.8 | 2021-06-04 | Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2021-30512 | High | 8.8 | 2021-06-04 | Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2021-30510 | High | 8.8 | 2021-06-04 | Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-7469 | High | 7.5 | 2021-06-04 | In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a… |
CVE-2021-30474 | Critical | 9.8 | 2021-06-02 | aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. |
CVE-2021-3543 | Medium | 6.7 | 2021-06-01 | A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A lo… |
CVE-2021-3516 | High | 7.8 | 2021-06-01 | There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-… |
CVE-2021-20292 | Medium | 6.7 | 2021-05-28 | There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsy… |
CVE-2020-35506 | Medium | 6.7 | 2021-05-28 | A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Informati… |
CVE-2021-30469 | Medium | 5.5 | 2021-05-26 | A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file. |
CVE-2020-25669 | High | 7.8 | 2021-05-26 | A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the… |
CVE-2020-25671 | High | 7.8 | 2021-05-26 | A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations. |
CVE-2020-25670 | High | 7.8 | 2021-05-26 | A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations. |
CVE-2021-33574 | Critical | 9.8 | 2021-05-25 | The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (pass… |
CVE-2021-29256 | High | 8.8 | 2021-05-24 | . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation… |
CVE-2020-36329 | Critical | 9.8 | 2021-05-21 | A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerabi… |
CVE-2020-23856 | Medium | 5.5 | 2021-05-18 | Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointe… |
CVE-2021-3518 | High | 8.8 | 2021-05-18 | There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 cou… |
CVE-2021-3483 | High | 7.8 | 2021-05-17 | A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free… |
CVE-2021-33034 | High | 7.8 | 2021-05-14 | In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an a… |
CVE-2021-33033 | High | 7.8 | 2021-05-14 | The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definiti… |
CVE-2019-25044 | High | 7.8 | 2021-05-14 | The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalatio… |
CVE-2021-32613 | Medium | 5.5 | 2021-05-14 | In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. |
CVE-2020-14354 | Low | 3.3 | 2021-05-13 | A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly a… |
CVE-2021-23134 | High | 7.8 | 2021-05-12 | Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, th… |
CVE-2021-32606 | High | 7.8 | 2021-05-11 | In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not… |
CVE-2021-31188 | High | 7.8 | 2021-05-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2021-31177 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31176 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31175 | High | 7.8 | 2021-05-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-31170 | High | 7.8 | 2021-05-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2021-31166 | Critical | 9.8 | 2021-05-11 | HTTP Protocol Stack Remote Code Execution Vulnerability |
CVE-2021-21822 | High | 8.8 | 2021-05-10 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigg… |
CVE-2021-28663 | High | 8.8 | 2021-05-10 | The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free… |
CVE-2021-31470 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31460 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31459 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31458 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31457 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31456 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31455 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31453 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31451 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31450 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-31441 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to ex… |
CVE-2021-1927 | High | 8.4 | 2021-05-07 | Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1905 | High | 8.4 | 2021-05-07 | Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2021-1891 | High | 8.4 | 2021-05-07 | A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2020-11295 | Medium | 6.8 | 2021-05-07 | Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2021-20204 | Critical | 9.8 | 2021-05-06 | A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades t… |
CVE-2020-28018 | Critical | 9.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL. |
CVE-2021-21232 | High | 8.8 | 2021-04-30 | Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21417 | High | 7.2 | 2021-04-29 | fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered wh… |
CVE-2021-21226 | Critical | 9.6 | 2021-04-26 | Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2021-21214 | High | 8.8 | 2021-04-26 | Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
CVE-2021-21213 | High | 8.8 | 2021-04-26 | Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21207 | High | 8.6 | 2021-04-26 | Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially per… |
CVE-2021-21206 | High | 8.8 | 2021-04-26 | Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21204 | High | 8.8 | 2021-04-26 | Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21203 | High | 8.8 | 2021-04-26 | Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21202 | High | 8.6 | 2021-04-26 | Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially pe… |
CVE-2021-21201 | Critical | 9.6 | 2021-04-26 | Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2021-31804 | Medium | 5.5 | 2021-04-26 | LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document. |
CVE-2021-22893 | Critical | 10.0 | 2021-04-23 | Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure… |
CVE-2021-0270 | High | 7.5 | 2021-04-22 | On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) microkernel ar… |
CVE-2021-0262 | Medium | 6.5 | 2021-04-22 | Through routine static code analysis of the Juniper Networks Junos OS software codebase, the Secure Development Life Cycle team identified a Use After Free vul… |
CVE-2020-35980 | High | 7.8 | 2021-04-21 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in isomedia/box_funcs.c. |
CVE-2021-3497 | High | 7.8 | 2021-04-19 | GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. |
CVE-2021-27031 | High | 7.8 | 2021-04-19 | A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a… |
CVE-2021-28454 | High | 7.8 | 2021-04-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-0442 | High | 7.8 | 2021-04-13 | In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local… |