Browse CVEs

HIGH 7.0 CVE-2025-50174 Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.6899 / 10.0.26200.6899+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-50175 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-53150 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-53768 Use after free in Xbox allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-48004 Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. Windows 11 22h2 10.0.22621.6060 / 10.0.25398.1913+ Fix from $1,9502025-10-14 CRITICAL 9.9 CVE-2025-49708 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $2,3002025-10-14 CRITICAL 9.8 CVE-2025-11719 Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory c… Firefox 144.0+ Fix from $2,3002025-10-14 CRITICAL 9.8 CVE-2025-11708 Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbir… Firefox 140.4.0 / 144.0+ Fix from $2,3002025-10-14 HIGH 7.5 CVE-2025-62170 rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in v… Rathena 2025-10-12+ Fix from $1,9502025-10-13 MEDIUM 5.5 CVE-2025-58299 Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. Harmonyos No fix yet Fix from $1,6002025-10-11 MEDIUM 5.5 CVE-2025-58287 Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. Harmonyos No fix yet Fix from $1,6002025-10-11 MEDIUM 6.1 CVE-2025-52885 Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in… Mitigation only Fix from $1,6002025-10-10 HIGH 7.0 CVE-2025-23280 NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability m… No fix yet Fix from $1,9502025-10-10 HIGH 7.8 CVE-2025-61864 A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to in… Monitouch V Sft after 6.2.7.0 Fix from $1,9502025-10-10 HIGH 7.8 CVE-2025-47354 Memory corruption while allocating buffers in DSP service. Fastconnect 6200 Firmware No fix yet Fix from $1,9502025-10-09 HIGH 7.1 CVE-2025-47342 Transient DOS may occur when multi-profile concurrency arises with QHS enabled. Qcc5161 Firmware No fix yet Fix from $1,9502025-10-09 HIGH 7.8 CVE-2023-53673 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_d… Linux Kernel 5.15.200 / 6.1.42+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2023-53638 In the Linux kernel, the following vulnerability has been resolved: octeon_ep: cancel queued works in probe error path If it fails to get the devic… Linux Kernel 6.4.12+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2023-53640 In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN use_after_free out of bounds When we run syzkaller w… Linux Kernel 5.15.114 / 6.1.31+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2023-53645 In the Linux kernel, the following vulnerability has been resolved: bpf: Make bpf_refcount_acquire fallible for non-owning refs This patch fixes an… Linux Kernel 6.4.4+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2023-53636 In the Linux kernel, the following vulnerability has been resolved: clk: microchip: fix potential UAF in auxdev release callback Similar to commit … Linux Kernel 6.1.28 / 6.2.15+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2023-53629 In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm … Linux Kernel 6.1.20 / 6.2.3+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2023-53619 In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_i… Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2022-50552 In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switch when reinitializing queues The hctx's run_… Linux Kernel 5.19.17 / 6.0.3+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2022-50542 In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470x_int_in_callback() syzbot reported u… Linux Kernel 4.9.337 / 4.14.303+ Fix from $1,9502025-10-07 HIGH 8.7 CVE-2025-59734 It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2. When a STOR chunk is presen… Mitigation only Fix from $1,9502025-10-06 HIGH 7.8 CVE-2023-53613 In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE te… Linux Kernel 5.10.188 / 5.15.121+ Fix from $1,9502025-10-04 HIGH 7.8 CVE-2023-53608 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() The… Linux Kernel 4.14.313 / 4.19.281+ Fix from $1,9502025-10-04 HIGH 7.8 CVE-2023-53587 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written … Linux Kernel 4.14.315 / 4.19.283+ Fix from $1,9502025-10-04 HIGH 7.8 CVE-2023-53572 In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use _safe list iterator to avoid a use after free This loop is f… Linux Kernel 5.15.121 / 6.1.39+ Fix from $1,9502025-10-04