Weaknesses of type CWE-416

4,152 results
CVE-2025-50174HIGHWindows Device Association Broker Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-5286HIGHUse after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.EPSS 0.3%CVE-2025-27365MEDIUMIBM MQ Operator denial of serviceEPSS 0.3%CVE-2026-9878HIGHUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a EPSS 0.3%CVE-2026-10952HIGHUse after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corrupEPSS 0.3%CVE-2022-41285HIGHA vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), TeamcenEPSS 0.3%CVE-2026-57436LOWNokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node typeEPSS 0.3%CVE-2025-46709HIGHGPU DDK - Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leakEPSS 0.3%CVE-2026-57437LOWNokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetimeEPSS 0.3%CVE-2026-10951HIGHUse after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specifEPSS 0.3%CVE-2024-8394MEDIUMWhen aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitabEPSS 0.3%CVE-2026-33150HIGHUse After Free in libfuseEPSS 0.3%CVE-2021-4083—A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call EPSS 0.3%CVE-2026-13831HIGHOut of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer proceEPSS 0.3%CVE-2026-8829HIGHHTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entitiesEPSS 0.3%CVE-2026-13855HIGHUse after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specifiEPSS 0.3%CVE-2026-7363HIGHUse after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code insEPSS 0.3%CVE-2021-3700—A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbrediEPSS 0.3%CVE-2025-3631MEDIUMIBM MQ denial of serviceEPSS 0.3%CVE-2025-59515HIGHWindows Broadcast DVR User Service Elevation of Privilege VulnerabilityEPSS 0.3%