CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,192)
page 218 of 410| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-44336 | Hig | 0.51 | 7.8 | 0.02 | Nov 16, 2023 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… | ||
| CVE-2023-4295 | Hig | 0.51 | 7.8 | 0.00 | Nov 7, 2023 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | ||
| CVE-2023-21381 | Hig | 0.51 | 7.8 | 0.00 | Oct 30, 2023 | In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-21355 | Hig | 0.51 | 7.8 | 0.00 | Oct 30, 2023 | In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-40140 | Hig | 0.51 | 7.8 | 0.00 | Oct 27, 2023 | In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for… | ||
| CVE-2023-40404 | Hig | 0.51 | 7.8 | 0.01 | Oct 25, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges. | ||
| CVE-2023-5633 | Hig | 0.51 | 7.8 | 0.00 | Oct 23, 2023 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local,… | ||
| CVE-2023-34366 | Hig | 0.51 | 7.8 | 0.01 | Oct 19, 2023 | A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause memory corruption, resulting in arbitrary code execution. Victim would need to open a malicious file to trigger this… | ||
| CVE-2023-45898 | Hig | 0.51 | 7.8 | 0.00 | Oct 16, 2023 | The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent. | ||
| CVE-2023-36743 | Hig | 0.51 | 7.8 | 0.04 | Oct 10, 2023 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2023-36726 | Hig | 0.51 | 7.8 | 0.01 | Oct 10, 2023 | Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability | ||
| CVE-2023-41995 | Hig | 0.51 | 7.8 | 0.00 | Sep 27, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges. | ||
| CVE-2023-41071 | Hig | 0.51 | 7.8 | 0.00 | Sep 27, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges. | ||
| CVE-2023-41375 | Hig | 0.51 | 7.8 | 0.00 | Sep 20, 2023 | Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue… | ||
| CVE-2023-38161 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows GDI Elevation of Privilege Vulnerability | ||
| CVE-2023-38139 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-36804 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows GDI Elevation of Privilege Vulnerability | ||
| CVE-2023-36760 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | 3D Viewer Remote Code Execution Vulnerability | ||
| CVE-2023-38075 | Hig | 0.51 | 7.8 | 0.00 | Sep 12, 2023 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All… | ||
| CVE-2023-35687 | Hig | 0.51 | 7.8 | 0.00 | Sep 11, 2023 | In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
- risk 0.51cvss 7.8epss 0.02
Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…
- risk 0.51cvss 7.8epss 0.00
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
- risk 0.51cvss 7.8epss 0.00
In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.51cvss 7.8epss 0.00
In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.51cvss 7.8epss 0.00
In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
- risk 0.51cvss 7.8epss 0.01
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.
- risk 0.51cvss 7.8epss 0.00
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local,…
- risk 0.51cvss 7.8epss 0.01
A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause memory corruption, resulting in arbitrary code execution. Victim would need to open a malicious file to trigger this…
- risk 0.51cvss 7.8epss 0.00
The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.
- risk 0.51cvss 7.8epss 0.04
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
- risk 0.51cvss 7.8epss 0.00
A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges.
- risk 0.51cvss 7.8epss 0.00
Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue…
- risk 0.51cvss 7.8epss 0.01
Windows GDI Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
3D Viewer Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All…
- risk 0.51cvss 7.8epss 0.00
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.