CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,277)
page 86 of 414| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-40907 | Cri | 0.57 | 9.8 | 0.01 | Jul 12, 2024 | In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XDP_TX path, ionic driver sends a packet to the TX path with rx page and corresponding dma address. After tx is done, ionic_tx_clean() frees that page. But RX… | ||
| CVE-2024-38053 | Hig | 0.57 | 8.8 | 0.01 | Jul 9, 2024 | Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability | ||
| CVE-2024-37320 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-21332 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-21308 | Hig | 0.57 | 8.8 | 0.02 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-21303 | Hig | 0.57 | 8.8 | 0.01 | Jul 9, 2024 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability | ||
| CVE-2024-6293 | Hig | 0.57 | 8.8 | 0.01 | Jun 24, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-6292 | Hig | 0.57 | 8.8 | 0.01 | Jun 24, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-6291 | Hig | 0.57 | 8.8 | 0.01 | Jun 24, 2024 | Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-6290 | Hig | 0.57 | 8.8 | 0.01 | Jun 24, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-6103 | Hig | 0.57 | 8.8 | 0.01 | Jun 20, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-5847 | Hig | 0.57 | 8.8 | 0.00 | Jun 11, 2024 | Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) | ||
| CVE-2024-5846 | Hig | 0.57 | 8.8 | 0.00 | Jun 11, 2024 | Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) | ||
| CVE-2024-5845 | Hig | 0.57 | 8.8 | 0.00 | Jun 11, 2024 | Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) | ||
| CVE-2024-5842 | Hig | 0.57 | 8.8 | 0.00 | Jun 11, 2024 | Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-5841 | Hig | 0.57 | 8.8 | 0.05 | Jun 11, 2024 | Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2024-5832 | Hig | 0.57 | 8.8 | 0.00 | Jun 11, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-5831 | Hig | 0.57 | 8.8 | 0.00 | Jun 11, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2024-5269 | Hig | 0.57 | 8.8 | 0.01 | Jun 6, 2024 | Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this… | ||
| CVE-2024-5498 | Hig | 0.57 | 8.8 | 0.01 | May 30, 2024 | Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
- risk 0.57cvss 9.8epss 0.01
In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XDP_TX path, ionic driver sends a packet to the TX path with rx page and corresponding dma address. After tx is done, ionic_tx_clean() frees that page. But RX…
- risk 0.57cvss 8.8epss 0.01
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.01
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.01
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.01
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.01
Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.00
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
- risk 0.57cvss 8.8epss 0.00
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
- risk 0.57cvss 8.8epss 0.00
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
- risk 0.57cvss 8.8epss 0.00
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
- risk 0.57cvss 8.8epss 0.05
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- risk 0.57cvss 8.8epss 0.00
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.00
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.01
Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this…
- risk 0.57cvss 8.8epss 0.01
Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)