CWE-825 · weakness in Memory Corruption
Expired Pointer Dereference
59 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 1
Every one of the 59 is a mark on the map. Named now: 1 to 26, most at risk first.
- SQUID-2023:11 Denial of Service in Cache Manager
- TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an ex…
- A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabili…
- A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can…
- Azure RTOS USBX Remote Code Execution Vulnerability
- Azure RTOS USBX Remote Code Execution Vulnerability
- Libxml: heap use after free (uaf) leads to denial of service (dos)
- sctp: purge outqueue on stale COOKIE-ECHO handling
- NGINX Plus MQTT vulnerability
- ewe: Loop with Unreachable Exit Condition ('Infinite Loop')
- Libxml: null pointer dereference leads to denial of service (dos)
- Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration
- Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake
- strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
- BIG-IP SSL vulnerability
- Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
- OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`
- PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting
- ipv6: fix possible UAF in icmpv6_rcv()
- IBM HTTP Server is affected by multiple vulnerabilities
- smb: client: fix potential UAF and double free in smb2_open_file()
- Expired Pointer Dereference in Wireshark
- inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush
- wifi: mac80211: remove station if connection prep fails
- An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of servic…
- An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.