CWE-825 · 39 records

Expired Pointer Dereference

CVEs in this class

39 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2024-23638No exploit	SQUID-2023:11 Denial of Service in Cache Managersquid-cache · squid · CWE-825 Denial of service	Medium6.5	—	60.0%	Jan 23, 2024
40Plan	CVE-2024-23310No exploit	A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee11libbiosig project · libbiosig · CWE-825 pre-auth RCE	Critical9.8	—	1.7%	Feb 20, 2024
39Monitor	CVE-2023-48694No exploit	Azure RTOS USBX Remote Code Execution Vulnerabilityeclipse · threadx usbx · CWE-825 pre-auth RCE	Critical9.8	—	1.3%	Dec 4, 2023
36Monitor	CVE-2025-49794No exploit	Libxml: heap use after free (uaf) leads to denial of service (dos)red hat · red hat enterprise linux 10 · CWE-825 Pre-auth	Critical9.1	—	0.8%	Jun 16, 2025
34Monitor	CVE-2024-39792No exploit	NGINX Plus MQTT vulnerabilityf5 · nginx plus · CWE-825 Pre-auth	High8.7	—	0.6%	Aug 14, 2024
32Monitor	CVE-2026-2436No exploit	Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshakegnome · libsoup · CWE-825 Pre-auth	High8.2	—	0.4%	Mar 26, 2026
31Monitor	CVE-2023-20212No exploit	A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition cisco · secure endpoint · CWE-825 Pre-auth Denial of service	High7.5	—	3.4%	Aug 18, 2023
31Monitor	CVE-2026-34001No exploit	Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionred hat · red hat enterprise linux 10 · CWE-825	High7.8	—	0.2%	Apr 23, 2026
31Monitor	CVE-2026-46176No exploit	RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()linux · linux kernel · CWE-825	High7.8	—	0.1%	May 28, 2026
31Monitor	CVE-2026-5165No exploit	Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device resetredhat · virtio-win · CWE-825	High7.8	—	0.1%	Mar 30, 2026
30Monitor	CVE-2026-32873No exploit	ewe: Loop with Unreachable Exit Condition ('Infinite Loop')vshakitskiy · ewe · CWE-825 Pre-auth Denial of service	High7.5	—	0.6%	Mar 19, 2026
30Monitor	CVE-2025-49795No exploit	Libxml: null pointer dereference leads to denial of service (dos)gnome · libxml2 · CWE-825 Pre-auth Denial of service	High7.5	—	0.5%	Jun 16, 2025
30Monitor	CVE-2026-8854No exploit	IBM HTTP Server is affected by multiple vulnerabilitiesibm · http server · CWE-825 Pre-auth Denial of service	High7.5	—	0.3%	May 26, 2026
29Monitor	CVE-2019-15691No exploit	TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecodertigervnc · tigervnc · CWE-825 RCE	High7.2	—	4.7%	Dec 26, 2019
28Monitor	CVE-2026-77220No exploit	PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formattingmichaelrsweet · pdfio · CWE-825	High7.1	—	0.4%	Aug 21, 2026
28Monitor	CVE-2026-102010No exploit	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_ifred hat · red hat enterprise linux 10 · CWE-825 Pre-auth	High7.0	—	0.3%	Sep 28, 2026
28Monitor	CVE-2026-10671No exploit	User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)zephyrproject · zephyr · CWE-825 Local privilege escalation	High7.1	—	0.1%	Jul 14, 2026
27Monitor	CVE-2025-12119No exploit	Bulk write with options may read invalid memorymongodb · c driver · CWE-825	Medium6.9	—	0.2%	Nov 18, 2025
26Monitor	CVE-2026-76890No exploit	Expired Pointer Dereference in Wiresharkwireshark · wireshark · CWE-825 Pre-auth Denial of service	Medium6.5	—	0.2%	Aug 19, 2026
26Monitor	CVE-2026-76891No exploit	Expired Pointer Dereference in Wiresharkwireshark · wireshark · CWE-825 Pre-auth Denial of service	Medium6.5	—	0.2%	Aug 19, 2026
26Monitor	CVE-2024-45105No exploit	An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that coulenovo · hx5530 appliance (thinkagile) bios · CWE-825 RCE Local privilege escalation	Medium6.7	—	0.1%	Sep 13, 2024
26Monitor	CVE-2026-86845No exploit	Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupred hat · fast datapath for rhel 10 · CWE-825 Denial of service	Medium6.5	—	0.1%	Oct 14, 2026
26Monitor	CVE-2026-42014No exploit	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinred hat · red hat enterprise linux 10 · CWE-825	Medium6.6	—	0.1%	Jun 16, 2026
25Monitor	CVE-2026-19939No exploit	Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruptionzephyrproject · zephyr · CWE-825	Medium6.3	—	0.1%	Oct 13, 2026
25Monitor	CVE-2026-12610No exploit	Sssd: use-after-free crash in sssd' 'sssd_pam' processfedoraproject · sssd · CWE-825 Local privilege escalation	Medium6.4	—	0.1%	Jun 30, 2026

CVE-2024-23638
44Plan
SQUID-2023:11 Denial of Service in Cache Manager
MediumCVSS 6.5No exploitEPSS 60%
- Denial of service
squid-cache · squidJan 23, 2024
CVE-2024-23310
40Plan
A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee11
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
libbiosig project · libbiosigFeb 20, 2024
CVE-2023-48694
39Monitor
Azure RTOS USBX Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
eclipse · threadx usbxDec 4, 2023
CVE-2025-49794
36Monitor
Libxml: heap use after free (uaf) leads to denial of service (dos)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
red hat · red hat enterprise linux 10Jun 16, 2025
CVE-2024-39792
34Monitor
NGINX Plus MQTT vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
f5 · nginx plusAug 14, 2024
CVE-2026-2436
32Monitor
Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
gnome · libsoupMar 26, 2026
CVE-2023-20212
31Monitor
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition
HighCVSS 7.5No exploitEPSS 3%
- Pre-auth
- Denial of service
cisco · secure endpointAug 18, 2023
CVE-2026-34001
31Monitor
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
HighCVSS 7.8No exploitEPSS 0%
red hat · red hat enterprise linux 10Apr 23, 2026
CVE-2026-46176
31Monitor
RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
HighCVSS 7.8No exploitEPSS 0%
linux · linux kernelMay 28, 2026
CVE-2026-5165
31Monitor
Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset
HighCVSS 7.8No exploitEPSS 0%
redhat · virtio-winMar 30, 2026
CVE-2026-32873
30Monitor
ewe: Loop with Unreachable Exit Condition ('Infinite Loop')
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
vshakitskiy · eweMar 19, 2026
CVE-2025-49795
30Monitor
Libxml: null pointer dereference leads to denial of service (dos)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
gnome · libxml2Jun 16, 2025
CVE-2026-8854
30Monitor
IBM HTTP Server is affected by multiple vulnerabilities
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · http serverMay 26, 2026
CVE-2019-15691
29Monitor
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder
HighCVSS 7.2No exploitEPSS 4%
- RCE
tigervnc · tigervncDec 26, 2019
CVE-2026-77220
28Monitor
PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting
HighCVSS 7.1No exploitEPSS 0%
michaelrsweet · pdfioAug 21, 2026
CVE-2026-102010
28Monitor
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
red hat · red hat enterprise linux 10Sep 28, 2026
CVE-2026-10671
28Monitor
User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
zephyrproject · zephyrJul 14, 2026
CVE-2025-12119
27Monitor
Bulk write with options may read invalid memory
MediumCVSS 6.9No exploitEPSS 0%
mongodb · c driverNov 18, 2025
CVE-2026-76890
26Monitor
Expired Pointer Dereference in Wireshark
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
wireshark · wiresharkAug 19, 2026
CVE-2026-76891
26Monitor
Expired Pointer Dereference in Wireshark
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
wireshark · wiresharkAug 19, 2026
CVE-2024-45105
26Monitor
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that cou
MediumCVSS 6.7No exploitEPSS 0%
- RCE
- Local privilege escalation
lenovo · hx5530 appliance (thinkagile) biosSep 13, 2024
CVE-2026-86845
26Monitor
Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
red hat · fast datapath for rhel 10Oct 14, 2026
CVE-2026-42014
26Monitor
Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
MediumCVSS 6.6No exploitEPSS 0%
red hat · red hat enterprise linux 10Jun 16, 2026
CVE-2026-19939
25Monitor
Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption
MediumCVSS 6.3No exploitEPSS 0%
zephyrproject · zephyrOct 13, 2026
CVE-2026-12610
25Monitor
Sssd: use-after-free crash in sssd' 'sssd_pam' process
MediumCVSS 6.4No exploitEPSS 0%
- Local privilege escalation
fedoraproject · sssdJun 30, 2026

All vulnerability classes