Vulnerabilities (CVE)

Filtered by CWE-416
Total 8686 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-29978 1 Microsoft 2 365 Apps, Office Long Term Servicing Channel 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-29977 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29970 1 Microsoft 3 Windows 11 24h2, Windows Server 2022 23h2, Windows Server 2025 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-29841 1 Microsoft 8 Windows 10 21h2, Windows 10 22h2, Windows 11 22h2 and 5 more 2026-06-17 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
CVE-2025-29831 1 Microsoft 7 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 4 more 2026-06-17 N/A 7.5 HIGH
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2025-29824 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-29823 1 Microsoft 1 365 Apps 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29820 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-29815 1 Microsoft 1 Edge Chromium 2026-06-17 N/A 7.6 HIGH
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2025-29792 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.3 HIGH
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2025-29699 1 Netsurf-browser 1 Netsurf 2026-06-17 N/A 6.5 MEDIUM
NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.
CVE-2025-27751 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27750 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27749 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27748 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27746 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27745 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.8 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27730 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2026-06-17 N/A 7.8 HIGH
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
CVE-2025-27729 1 Microsoft 6 Windows 10 21h2, Windows 10 22h2, Windows 11 22h2 and 3 more 2026-06-17 N/A 7.8 HIGH
Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
CVE-2025-27723 2026-06-17 N/A N/A
Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.