CWE-416 · Use After Free (page 70)
Page 70 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-3701 | High | 7.8 | 2020-07-30 | Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM825… |
CVE-2020-3671 | Critical | 9.8 | 2020-07-30 | Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-14037 | High | 7.8 | 2020-07-30 | Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2019-10580 | High | 7.8 | 2020-07-30 | When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdr… |
CVE-2020-15706 | Medium | 6.4 | 2020-07-29 | GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whil… |
CVE-2020-6518 | High | 8.8 | 2020-07-22 | Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potenti… |
CVE-2020-6515 | High | 8.8 | 2020-07-22 | Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6509 | Critical | 9.6 | 2020-07-22 | Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially p… |
CVE-2020-6505 | Critical | 9.6 | 2020-07-22 | Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2020-15888 | High | 8.8 | 2020-07-21 | Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read… |
CVE-2020-15859 | Low | 3.3 | 2020-07-21 | QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO a… |
CVE-2020-0305 | Medium | 6.4 | 2020-07-17 | In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution p… |
CVE-2020-1382 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevat… |
CVE-2020-1381 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevat… |
CVE-2020-12420 | High | 8.8 | 2020-07-09 | When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially explo… |
CVE-2020-12419 | High | 8.8 | 2020-07-09 | When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This c… |
CVE-2020-12416 | High | 8.8 | 2020-07-09 | A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a po… |
CVE-2020-12405 | Medium | 5.3 | 2020-07-09 | When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects… |
CVE-2020-7457 | High | 8.1 | 2020-07-09 | In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchro… |
CVE-2020-10730 | Medium | 6.5 | 2020-07-07 | A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Alt… |
CVE-2020-9262 | High | 7.8 | 2020-07-06 | HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. There is a condition exists that the system would refere… |
CVE-2020-10760 | Medium | 6.5 | 2020-07-06 | A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP use… |
CVE-2020-15569 | Medium | 5.5 | 2020-07-06 | PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor. |
CVE-2020-15475 | Critical | 9.8 | 2020-07-01 | In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free. |
CVE-2020-15389 | Medium | 6.5 | 2020-06-29 | jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated… |
CVE-2020-9567 | High | 7.8 | 2020-06-26 | Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2020-9566 | High | 7.8 | 2020-06-26 | Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2020-15305 | Medium | 5.5 | 2020-06-26 | An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeep… |
CVE-2020-9607 | High | 7.8 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an us… |
CVE-2020-9606 | High | 7.8 | 2020-06-25 | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an us… |
CVE-2020-3963 | Medium | 5.5 | 2020-06-25 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and F… |
CVE-2020-3962 | High | 8.2 | 2020-06-24 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and F… |
CVE-2020-4031 | Low | 3.5 | 2020-06-22 | In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affec… |
CVE-2020-4060 | Medium | 4.1 | 2020-06-22 | In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the… |
CVE-2020-3642 | High | 7.8 | 2020-06-22 | Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snap… |
CVE-2020-14416 | Medium | 4.2 | 2020-06-18 | In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0a… |
CVE-2020-0232 | Critical | 9.8 | 2020-06-16 | Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work with it. A concurrent thread could retrie… |
CVE-2020-0595 | Critical | 9.8 | 2020-06-15 | Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to… |
CVE-2020-9633 | Critical | 9.8 | 2020-06-12 | Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Ed… |
CVE-2020-0233 | High | 7.8 | 2020-06-11 | In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution… |
CVE-2020-0212 | Medium | 6.5 | 2020-06-11 | In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosu… |
CVE-2020-0199 | Medium | 4.1 | 2020-06-11 | In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information di… |
CVE-2020-0126 | Medium | 6.4 | 2020-06-11 | In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System executi… |
CVE-2020-0113 | Medium | 5.5 | 2020-06-10 | In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure… |
CVE-2020-1226 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
CVE-2020-1225 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
CVE-2020-1207 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… |
CVE-2020-9795 | High | 7.8 | 2020-06-09 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, wat… |
CVE-2020-13904 | Medium | 5.5 | 2020-06-07 | FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later… |
CVE-2020-13871 | High | 7.5 | 2020-06-06 | SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late. |
CVE-2020-13814 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary. |
CVE-2020-13806 | High | 7.5 | 2020-06-04 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operatio… |
CVE-2020-6496 | High | 8.8 | 2020-06-03 | Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2020-6493 | Critical | 9.6 | 2020-06-03 | Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2020-3618 | High | 7.8 | 2020-06-02 | NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Netwo… |
CVE-2019-14087 | High | 7.8 | 2020-06-02 | Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapd… |
CVE-2020-13630 | High | 7.0 | 2020-05-27 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. |
CVE-2020-12387 | High | 8.1 | 2020-05-26 | A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulner… |
CVE-2020-1799 | High | 7.5 | 2020-05-21 | E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memo… |
CVE-2020-6474 | High | 8.8 | 2020-05-21 | Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6467 | High | 8.8 | 2020-05-21 | Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6466 | Critical | 9.6 | 2020-05-21 | Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… |
CVE-2020-6465 | Critical | 9.6 | 2020-05-21 | Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potential… |
CVE-2020-6463 | High | 8.8 | 2020-05-21 | Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6462 | Critical | 9.6 | 2020-05-21 | Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially per… |
CVE-2020-6461 | Critical | 9.6 | 2020-05-21 | Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2020-6459 | High | 8.8 | 2020-05-21 | Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6457 | Critical | 9.6 | 2020-05-21 | Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
CVE-2020-1897 | Critical | 9.8 | 2020-05-18 | A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific… |
CVE-2020-6074 | High | 8.8 | 2020-05-18 | An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which… |
CVE-2020-10958 | Medium | 5.3 | 2020-05-18 | In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead t… |
CVE-2018-10756 | High | 7.8 | 2020-05-15 | Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitr… |
CVE-2019-15878 | High | 7.8 | 2020-05-13 | In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situatio… |
CVE-2020-5897 | High | 8.8 | 2020-05-12 | In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component. |
CVE-2019-19162 | High | 7.8 | 2020-05-11 | A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it. |
CVE-2020-11866 | High | 7.8 | 2020-05-11 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free. |
CVE-2019-20795 | Medium | 4.4 | 2020-05-09 | iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, al… |
CVE-2020-10690 | Medium | 6.5 | 2020-05-08 | There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (… |
CVE-2020-12657 | High | 7.8 | 2020-05-05 | An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body. |
CVE-2020-10700 | Medium | 5.3 | 2020-05-04 | A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a… |
CVE-2020-1752 | High | 7.0 | 2020-04-30 | A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing a… |
CVE-2020-12464 | Medium | 6.7 | 2020-04-29 | usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad3… |
CVE-2019-15874 | Critical | 9.8 | 2020-04-29 | In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete pac… |
CVE-2020-12267 | Critical | 9.8 | 2020-04-27 | setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. |
CVE-2020-6819 | High | 8.1 | 2020-04-24 | Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu… |
CVE-2020-10907 | High | 7.8 | 2020-04-22 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exp… |
CVE-2020-10906 | High | 7.8 | 2020-04-22 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exp… |
CVE-2020-10900 | High | 7.8 | 2020-04-22 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exp… |
CVE-2020-10899 | High | 7.8 | 2020-04-22 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exp… |
CVE-2020-1983 | High | 7.5 | 2020-04-22 | A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service. |
CVE-2020-7082 | High | 8.8 | 2020-04-17 | A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a system running it. |
CVE-2020-11793 | High | 8.8 | 2020-04-17 | A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary… |
CVE-2019-14070 | High | 7.0 | 2020-04-16 | Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10621 | High | 7.8 | 2020-04-16 | Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute… |
CVE-2020-2758 | High | 8.2 | 2020-04-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior t… |
CVE-2020-6454 | High | 8.8 | 2020-04-13 | Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
CVE-2020-6451 | High | 8.8 | 2020-04-13 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6450 | High | 8.8 | 2020-04-13 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6448 | High | 8.8 | 2020-04-13 | Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6436 | High | 8.8 | 2020-04-13 | Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |