Vulnerabilities (CVE)

Filtered by CWE-416
Total 8686 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-35827 1 Linux 1 Linux Kernel 2026-06-17 N/A 7.0 HIGH
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.
CVE-2023-35826 2 Linux, Netapp 6 Linux Kernel, H300s, H410c and 3 more 2026-06-17 N/A 7.0 HIGH
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
CVE-2023-35824 2 Debian, Linux 2 Debian Linux, Linux Kernel 2026-06-17 N/A 7.0 HIGH
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.
CVE-2023-35784 1 Openbsd 2 Libressl, Openbsd 2026-06-17 N/A 9.8 CRITICAL
A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
CVE-2023-35734 1 Santesoft 1 Dicom Viewer Pro 2026-06-17 N/A 6.5 MEDIUM
Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-21405.
CVE-2023-35693 1 Google 1 Android 2026-06-17 N/A 6.7 MEDIUM
In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-35687 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-35685 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-35666 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-35660 1 Google 1 Android 2026-06-17 N/A 6.7 MEDIUM
In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-35658 1 Google 1 Android 2026-06-17 N/A 8.8 HIGH
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-35628 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 8.1 HIGH
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-35618 1 Microsoft 1 Edge Chromium 2026-06-17 N/A 9.6 CRITICAL
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-35351 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2026-06-17 N/A 6.6 MEDIUM
Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
CVE-2023-35323 1 Microsoft 2 Windows 11 21h2, Windows Server 2022 2026-06-17 N/A 7.8 HIGH
Windows OLE Remote Code Execution Vulnerability
CVE-2023-35313 1 Microsoft 10 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 7 more 2026-06-17 N/A 7.8 HIGH
Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
CVE-2023-35300 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 8.8 HIGH
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-34970 1 Arm 2 Mali Gpu Kernel Driver, Valhall Gpu Kernel Driver 2026-06-17 N/A 4.7 MEDIUM
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory
CVE-2023-34795 1 Xlsxio Project 1 Xlsxio 2026-06-17 N/A 7.8 HIGH
xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX file.
CVE-2023-34494 1 Emqx 1 Nanomq 2026-06-17 N/A 7.5 HIGH
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.