CWE-416 · Use After Free (page 68)
Page 68 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0310 | High | 7.8 | 2021-01-11 | In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv… |
CVE-2021-0303 | High | 7.0 | 2021-01-11 | In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race… |
CVE-2021-0342 | Medium | 6.7 | 2021-01-11 | In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution p… |
CVE-2021-21115 | Critical | 9.6 | 2021-01-08 | User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perf… |
CVE-2021-21114 | High | 8.8 | 2021-01-08 | Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21112 | High | 8.8 | 2021-01-08 | Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21110 | Critical | 9.6 | 2021-01-08 | Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa… |
CVE-2021-21109 | Critical | 9.6 | 2021-01-08 | Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2021-21108 | Critical | 9.6 | 2021-01-08 | Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2021-21107 | Critical | 9.6 | 2021-01-08 | Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentia… |
CVE-2021-21106 | Critical | 9.6 | 2021-01-08 | Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2020-16039 | High | 8.8 | 2021-01-08 | Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16038 | High | 8.8 | 2021-01-08 | Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16037 | High | 8.8 | 2021-01-08 | Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16026 | High | 8.8 | 2021-01-08 | Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16023 | High | 8.8 | 2021-01-08 | Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16018 | Critical | 9.6 | 2021-01-08 | Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2020-16017 | Critical | 9.6 | 2021-01-08 | Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perf… |
CVE-2020-16014 | Critical | 9.6 | 2021-01-08 | Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… |
CVE-2020-27835 | Medium | 4.4 | 2021-01-07 | A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A… |
CVE-2020-26972 | Critical | 9.8 | 2021-01-07 | The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor… |
CVE-2020-8265 | High | 8.1 | 2021-01-06 | Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socke… |
CVE-2020-35876 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-a… |
CVE-2020-35874 | High | 8.1 | 2020-12-31 | An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free. |
CVE-2020-35873 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free. |
CVE-2020-35870 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free. |
CVE-2020-35862 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free. |
CVE-2018-25001 | Medium | 6.5 | 2020-12-31 | An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free. |
CVE-2020-35923 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN. |
CVE-2020-35917 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>. |
CVE-2020-35906 | High | 7.8 | 2020-12-31 | An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation. |
CVE-2020-35902 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed. |
CVE-2020-35901 | High | 7.5 | 2020-12-31 | An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream. |
CVE-2020-35900 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free. |
CVE-2020-35899 | Medium | 5.5 | 2020-12-31 | An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same… |
CVE-2020-35898 | Critical | 9.1 | 2020-12-31 | An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same da… |
CVE-2020-9093 | Medium | 5.5 | 2020-12-29 | There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a func… |
CVE-2020-13570 | High | 8.8 | 2020-12-22 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigg… |
CVE-2020-13560 | High | 8.8 | 2020-12-22 | A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can… |
CVE-2020-13557 | High | 8.8 | 2020-12-22 | A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can… |
CVE-2020-29483 | Medium | 6.5 | 2020-12-15 | An issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared memory page using a specific protocol. When a guest violates this… |
CVE-2020-29569 | High | 8.8 | 2020-12-15 | An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handle… |
CVE-2020-27067 | Medium | 6.4 | 2020-12-15 | In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2020-27066 | Medium | 6.7 | 2020-12-15 | In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of privile… |
CVE-2020-27044 | High | 7.8 | 2020-12-15 | In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no addition… |
CVE-2020-27035 | Medium | 5.5 | 2020-12-15 | In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in… |
CVE-2020-0496 | Medium | 5.5 | 2020-12-15 | In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information d… |
CVE-2020-0484 | Medium | 6.7 | 2020-12-15 | In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with Sys… |
CVE-2020-0483 | Medium | 6.7 | 2020-12-15 | In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local es… |
CVE-2020-0474 | High | 7.0 | 2020-12-15 | In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2020-0466 | High | 7.8 | 2020-12-14 | In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privileg… |
CVE-2020-8231 | High | 7.5 | 2020-12-14 | Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. |
CVE-2020-27786 | High | 7.8 | 2020-12-11 | A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devic… |
CVE-2020-16600 | High | 7.8 | 2020-12-09 | A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixm… |
CVE-2020-16592 | Medium | 5.5 | 2020-12-09 | A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that… |
CVE-2020-29661 | High | 7.8 | 2020-12-09 | A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSP… |
CVE-2020-29660 | Medium | 4.4 | 2020-12-09 | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may al… |
CVE-2020-26960 | High | 8.8 | 2020-12-09 | If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free… |
CVE-2020-26959 | High | 8.8 | 2020-12-09 | During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potent… |
CVE-2020-26950 | High | 8.8 | 2020-12-09 | In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerab… |
CVE-2020-27918 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iClou… |
CVE-2020-27926 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. Processing maliciously crafted web conte… |
CVE-2020-27917 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iClou… |
CVE-2020-25663 | Medium | 5.5 | 2020-12-08 | A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow REA… |
CVE-2020-9996 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious applic… |
CVE-2020-9981 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9… |
CVE-2020-9950 | High | 8.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, tvOS 14.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Pro… |
CVE-2020-9949 | High | 7.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, macOS… |
CVE-2020-9947 | High | 8.8 | 2020-12-08 | A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9… |
CVE-2020-14381 | High | 7.8 | 2020-12-03 | A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creat… |
CVE-2020-14351 | High | 7.8 | 2020-12-03 | A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf ev… |
CVE-2020-13584 | High | 8.8 | 2020-12-03 | An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condit… |
CVE-2020-13543 | High | 8.8 | 2020-12-03 | A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vuln… |
CVE-2020-13531 | High | 8.8 | 2020-12-03 | A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specially crafted file can trigger the reuse… |
CVE-2020-25656 | Medium | 4.1 | 2020-12-02 | A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could… |
CVE-2019-20934 | Medium | 5.3 | 2020-11-28 | An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in show_numa_stats() because NUMA faul… |
CVE-2020-27207 | High | 7.5 | 2020-11-26 | Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack… |
CVE-2020-15436 | Medium | 6.7 | 2020-11-23 | Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging… |
CVE-2019-14586 | High | 8.0 | 2020-11-23 | Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of s… |
CVE-2019-2393 | Medium | 6.5 | 2020-11-23 | A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue… |
CVE-2020-25725 | Medium | 5.0 | 2020-11-21 | In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-us… |
CVE-2020-4004 | High | 8.2 | 2020-11-20 | VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x b… |
CVE-2020-28951 | Critical | 9.8 | 2020-11-19 | libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_packag… |
CVE-2020-8750 | High | 7.8 | 2020-11-12 | Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2020-12303 | High | 7.8 | 2020-11-12 | Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3… |
CVE-2020-11175 | High | 7.8 | 2020-11-12 | u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.'… |
CVE-2020-0449 | High | 8.8 | 2020-11-10 | In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth… |
CVE-2020-24438 | Low | 3.3 | 2020-11-05 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnera… |
CVE-2020-24437 | High | 7.8 | 2020-11-05 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnera… |
CVE-2020-24430 | High | 7.8 | 2020-11-05 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnera… |
CVE-2020-1909 | Critical | 9.8 | 2020-11-03 | A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory cor… |
CVE-2020-16004 | High | 8.8 | 2020-11-03 | Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2020-16003 | High | 8.8 | 2020-11-03 | Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16002 | High | 8.8 | 2020-11-03 | Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2020-16001 | High | 8.8 | 2020-11-03 | Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15998 | High | 8.8 | 2020-11-03 | Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo… |
CVE-2020-15997 | High | 8.8 | 2020-11-03 | Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb… |
CVE-2020-15996 | High | 8.8 | 2020-11-03 | Use after free in passwords in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2020-15994 | High | 8.8 | 2020-11-03 | Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15993 | Critical | 9.8 | 2020-11-03 | Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |