Use-After-Free - 6956 CVEs (Page 51/58)

About “Use-After-Free”

A curated feed of “Use-After-Free”-related CVEs appears below. We currently track 6956 CVEs for this tag (all time). In the last 365 days, 1453 were published. Average CVSS is 7.9 (all time; 7.6 over 365d), and 79% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-416 - Use After Free, CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer.

In our taxonomy this topic maps to a HIGH impact class. Common exploitation patterns for this weakness can lead to high. Use the filters to triage high risk first and validate exposure in your environment. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2016-01-14

Critical

CVE-2016-0940

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on…

CVSS: 9.8 CWE: N/A View on NVD

High

CVE-2016-0937

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC…

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2016-0934

Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.0…

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2016-0932

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC…

CVSS: 8.8 CWE: N/A View on NVD

2016-01-12

Critical

CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

2016-01-04

Medium

CVE-2015-8727

The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which all…

CVSS: 5.5 CWE: CWE-20 - Improper Input Validation View on NVD

2015-12-28

High

CVE-2015-8650

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S…

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8649

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8648

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8647

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8646

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8643

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8642

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8641

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8640

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8639

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8638

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8635

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8634

CVSS: 8.8 CWE: N/A View on NVD

Medium

CVE-2013-7446

Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted e…

CVSS: 5.3 CWE: N/A View on NVD

2015-12-16

Medium

CVE-2015-8580

Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary…

CVSS: 6.8 CWE: N/A View on NVD

High

CVE-2015-7210

Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has b…

CVSS: 7.5 CWE: N/A View on NVD

2015-12-14

Critical

CVE-2015-6789

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have un…

CVSS: 9.3 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

2015-12-11

High

CVE-2015-7078

Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects.

CVSS: 7.2 CWE: N/A View on NVD

2015-12-10

Critical

CVE-2015-8454

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR S…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8452

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8450

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8449

Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8448

Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8447

Use-after-free vulnerability in the Color object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8442

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8441

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8437

Use-after-free vulnerability in the Selection object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8436

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Ad…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8435

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8434

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8433

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8432

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8431

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8430

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8429

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8428

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8427

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8426

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8425

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8424

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8423

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8422

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8421

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8420

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8414

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8413

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8412

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8411

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8410

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8406

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8405

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8404

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8403

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8402

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8401

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8071

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8070

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8069

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8068

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8067

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8066

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8065

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8064

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8063

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8062

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8061

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8059

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8058

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8057

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8056

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8055

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8050

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8049

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8048

CVSS: 10.0 CWE: N/A View on NVD

2015-12-09

High

CVE-2015-6126

Race condition in the Pragmatic General Multicast (PGM) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Serv…

CVSS: 7.2 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

Critical

CVE-2015-6125

Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka…

CVSS: 9.3 CWE: N/A View on NVD

2015-12-06

High

CVE-2015-8479

Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of ser…

CVSS: 7.5 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Medium

CVE-2015-6780

Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a c…

CVSS: 6.8 CWE: N/A View on NVD

High

CVE-2015-6777

Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allow…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2015-6774

Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2015-6767

Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of s…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2015-6766

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified…

CVSS: 7.5 CWE: N/A View on NVD

Critical

CVE-2015-6765

Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by…

CVSS: 10.0 CWE: N/A View on NVD

2015-11-16

Medium

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service (use-aft…

CVSS: 4.4 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

2015-11-13

Critical

CVE-2015-6045

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…

CVSS: 9.3 CWE: N/A View on NVD

2015-11-11

Critical

CVE-2015-8046

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8044

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8043

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8042

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7663

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7661

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7660

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7658

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7657

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7656

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7655

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7654

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7653

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7652

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7651

CVSS: 9.3 CWE: N/A View on NVD

2015-10-18

Critical

CVE-2015-7642

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7641

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7640

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7639

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7638

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7637

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7636

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7635

CVSS: 10.0 CWE: N/A View on NVD

2015-10-15

High

CVE-2015-6757

Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2015-6756

Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of s…

CVSS: 6.8 CWE: N/A View on NVD

Critical

CVE-2015-7644

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-7643

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7631

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-7629

CVSS: 9.3 CWE: N/A View on NVD