CWE-416

Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code insid

A security vulnerability has been detected in EIPStackGroup OpENer up to 2.3.0. Affected is the function CreateMessageRo

On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintain

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a phys

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.2

YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator

A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02

In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dy

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerabili

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability a

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_data(pkt) returned s

subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5,

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38

openGauss 在处理带 NLS 参数的 to_timestamp 调用时，to_timestamp_with_fmt_nls() 会将 nls_fmt_str 保存到 u_sess->parser_cxt.nls_fmt_str。在

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File Syst

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queri

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together

The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 t

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the r

Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised

A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work tim

UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability a

Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions. The “

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerabi

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript ch

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even w

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 a

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to c

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows at

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-af

Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attacker

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attacker

A use-after-free in the gf_filter_pid_reconfigure_task_discard function (/filter_core/filter_pid.c) of GPAC Project/MP4B

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and i

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain pot