Browse CVEs

CRITICAL 9.8 CVE-2024-57959 Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormal… Emui Mitigation only Fix from $2,3002025-02-06 MEDIUM 6.3 CVE-2025-0444 Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 133.0.6943.53+ Fix from $1,6002025-02-04 MEDIUM 5.4 CVE-2025-0445 Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 133.0.6943.53+ Fix from $1,6002025-02-04 HIGH 7.5 CVE-2025-1012 A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox … Firefox 115.20.0 / 128.7.0+ Fix from $1,9502025-02-04 CRITICAL 9.8 CVE-2025-1009 An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Fir… Firefox 115.20.0 / 128.7.0+ Fix from $2,3002025-02-04 HIGH 8.8 CVE-2025-1010 An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed… Firefox 115.20.0 / 128.7.0+ Fix from $1,9502025-02-04 MEDIUM 6.3 CVE-2025-24898 rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointin… Patch available Fix from $1,6002025-02-03 HIGH 7.8 CVE-2024-45571 Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. Ar8035 Firmware Patch available Fix from $1,9502025-02-03 HIGH 7.8 CVE-2024-45561 Memory corruption while handling IOCTL call from user-space to set latency level. Aqt1000 Firmware Mitigation only Fix from $1,9502025-02-03 HIGH 7.8 CVE-2024-38411 Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. Fastconnect 6900 Firmware Patch available Fix from $1,9502025-02-03 HIGH 7.8 CVE-2024-38412 Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors. Fastconnect 7800 Firmware Patch available Fix from $1,9502025-02-03 HIGH 7.8 CVE-2025-0015 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged u… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,9502025-02-03 HIGH 7.8 CVE-2025-21671 In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta_alloc failed early, it frees… Linux Kernel 6.1.127 / 6.6.74+ Fix from $1,9502025-01-31 HIGH 7.8 CVE-2024-47891 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Mitigation only Fix from $1,9502025-01-31 HIGH 7.8 CVE-2024-47898 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Mitigation only Fix from $1,9502025-01-31 HIGH 7.8 CVE-2024-47899 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Mitigation only Fix from $1,9502025-01-31 HIGH 8.8 CVE-2025-0762 Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Ch… Chrome 132.0.6834.159+ Fix from $1,9502025-01-29 HIGH 8.4 CVE-2024-40649 In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel wi… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40651 In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel wi… Android No fix yet Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40669 In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execut… Android No fix yet Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40670 In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execut… Android No fix yet Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-34748 In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalat… Android Mitigation only Fix from $1,9502025-01-28 MEDIUM 5.5 CVE-2024-0147 NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of servi… Mitigation only Fix from $1,6002025-01-28 CRITICAL 10.0 CVE-2025-24085 KEVEPSS 17% A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 1… Ipados 2.3 / 11.3+ Fix from $2,3002025-01-27 HIGH 8.8 CVE-2024-54499 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2,… Ipados 2.2 / 11.2+ Fix from $1,9502025-01-27 HIGH 7.8 CVE-2022-49043 xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. Libxml2 2.11.0+ Fix from $1,9502025-01-26 HIGH 7.8 CVE-2024-57926 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind retur… Linux Kernel 6.6.72 / 6.12.10+ Fix from $1,9502025-01-19 HIGH 7.8 CVE-2025-21652 In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlan_get_iflink(). syzbot presented an use-afte… Linux Kernel 6.6.72 / 6.12.10+ Fix from $1,9502025-01-19 HIGH 7.8 CVE-2025-21631 In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a fo… Linux Kernel 5.15.177 / 6.1.125+ Fix from $1,9502025-01-19 HIGH 7.8 CVE-2024-57896 In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmou… Linux Kernel 5.10.233 / 5.15.176+ Fix from $1,9502025-01-15