CWE-416: Use After Free, page 129

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

1. 8.8CVE-2022-3038KEVEPSS 25%2022-09-26

   Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

2. 8.8CVE-2022-2998EPSS 30%2022-09-26

   Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page.

3. 8.8CVE-2022-2859EPSS 0.9%2022-09-26

   Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions.

4. 8.8CVE-2022-2858EPSS 0.9%2022-09-26

   Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.

5. 8.8CVE-2022-2855EPSS 0.9%2022-09-26

   Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

6. 8.8CVE-2022-2852EPSS 3.0%2022-09-26

   Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

7. 7.8CVE-2022-3297EPSS 0.5%2022-09-25

   Use After Free in GitHub repository vim/vim prior to 9.0.0579.

8. 8.8CVE-2022-22628EPSS 1.3%2022-09-23

   A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitra…

9. 8.8CVE-2022-22624EPSS 1.3%2022-09-23

   A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execu…

10. 7.8CVE-2022-3256EPSS 0.5%2022-09-22

    Use After Free in GitHub repository vim/vim prior to 9.0.0530.

11. 7.0CVE-2022-41222EPSS 0.5%2022-09-21

    mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

12. 5.5CVE-2022-41218EPSS 0.8%2022-09-21

    In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.

13. 9.8CVE-2022-40009EPSS 1.3%2022-09-20

    SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.

14. 7.8CVE-2022-3239EPSS 0.3%2022-09-19

    A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privil…

15. 5.5CVE-2022-38425EPSS 0.5%2022-09-19

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a…

16. 5.5CVE-2022-35709EPSS 0.4%2022-09-19

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a…

17. 7.8CVE-2022-35704EPSS 0.5%2022-09-19

    Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in…

18. 7.8CVE-2022-3235EPSS 0.5%2022-09-18

    Use After Free in GitHub repository vim/vim prior to 9.0.0490.

19. 7.8CVE-2022-38434EPSS 0.6%2022-09-16

    Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use…

20. 5.5CVE-2022-38428EPSS 0.5%2022-09-16

    Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations su…

21. 7.8CVE-2022-3176EPSS 0.3%2022-09-16

    There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunate…

22. 7.8CVE-2022-25693EPSS 0.1%2022-09-16

    Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

23. 7.8CVE-2022-22095EPSS 0.1%2022-09-16

    Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

24. 7.8CVE-2022-22092EPSS 0.1%2022-09-16

    Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

25. 7.8CVE-2022-40639EPSS 0.6%2022-09-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a…

26. 7.8CVE-2022-40638EPSS 0.6%2022-09-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a…

27. 7.8CVE-2022-40637EPSS 0.5%2022-09-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a…

28. 7.8CVE-2022-2977EPSS 0.2%2022-09-14

    A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation …

29. 8.1CVE-2022-40674EPSS 2.2%2022-09-14

    libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

30. 7.0CVE-2021-0697EPSS 0.08%2022-09-13

    In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

31. 7.8CVE-2022-2979EPSS 0.2%2022-09-12

    Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.

32. 5.5CVE-2022-40133EPSS 0.6%2022-09-09

    A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker …

33. 5.5CVE-2022-38457EPSS 0.6%2022-09-09

    A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a…

34. 7.8CVE-2022-36855EPSS 0.1%2022-09-09

    A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

35. 7.8CVE-2022-36849EPSS 0.09%2022-09-09

    Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.

36. 7.8CVE-2022-36847EPSS 0.09%2022-09-09

    Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.

37. 9.8CVE-2022-2526EPSS 1.4%2022-09-09

    A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. There…

38. 7.8CVE-2022-3134EPSS 0.6%2022-09-06

    Use After Free in GitHub repository vim/vim prior to 9.0.0389.

39. 6.7CVE-2022-26453EPSS 0.1%2022-09-06

    In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06664675; Issu…

40. 7.8CVE-2022-3099EPSS 0.5%2022-09-03

    Use After Free in GitHub repository vim/vim prior to 9.0.0360.

41. 7.8CVE-2022-22097EPSS 0.1%2022-09-02

    Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT

42. 6.7CVE-2021-35133EPSS 0.1%2022-09-02

    Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

43. 7.5CVE-2022-2738EPSS 0.9%2022-09-01

    The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could …

44. 5.5CVE-2020-27784EPSS 0.2%2022-09-01

    A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev instance. However, use-after-free arises because it had been freed by gprinter_free().

45. 6.5CVE-2022-36449EPSS 1.2%2022-09-01

    An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of…

46. 7.8CVE-2022-2896EPSS 0.3%2022-08-31

    Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.

47. 7.8CVE-2022-1976EPSS 0.2%2022-08-31

    A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a string of requests that can cause a use-after-free flaw within the kernel. This issue leads to mem…

48. 4.1CVE-2022-1974EPSS 0.1%2022-08-31

    A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.

49. 4.7CVE-2022-1205EPSS 0.4%2022-08-31

    A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

50. 7.8CVE-2022-3037EPSS 0.5%2022-08-30

    Use After Free in GitHub repository vim/vim prior to 9.0.0322.