CWE-911 · Memory Corruption
Improper Update of Reference Count
18CVEs
SortMost likely exploited
18 CVEs with CWE-911 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-1678An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote client…Linux · kernel · CVSS 5.9 · 2022-05-25 | 5.9 | 2.9% | 2022-05-25 |
| CVE-2022-37012This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication…Unified Automation · OPC UA C++ Demo Server · CVSS 7.5 · 2023-03-29 | 7.5 | 1.8% | 2023-03-29 |
| CVE-2022-22195Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crashJuniper Networks · Junos OS Evolved · CVSS 7.5 · 2022-04-14 | 7.5 | 1.1% | 2022-04-14 |
| CVE-2022-29581Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel version…Linux · Kernel · CVSS 7.8 · 2022-05-17 | 7.8 | 0.9% | 2022-05-17 |
| CVE-2023-22394Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP callsJuniper Networks · Junos OS · CVSS 7.5 · 2023-01-12 | 7.5 | 0.7% | 2023-01-12 |
| CVE-2026-49419Jail reference count underflowFreeBSD · FreeBSD · CVSS 8.8 · 2026-08-19 | 8.8 | 0.5% | 2026-08-19 |
| CVE-2026-77587Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been c…torproject · Tor · CVSS 5.9 · 2026-08-20 | 5.9 | 0.4% | 2026-08-20 |
| CVE-2023-2019A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may all…Linux · Linux kernel's netdevsim device driver · CVSS 4.4 · 2023-04-24 | 4.4 | 0.3% | 2023-04-24 |
| CVE-2026-46316KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entryLinux · Linux · CVSS 9.3 · 2026-06-09 | 9.3 | 0.3% | 2026-06-09 |
| CVE-2026-52943net: skbuff: fix missing zerocopy reference in pskb_carve helpersLinux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.3% | 2026-06-24 |
| CVE-2023-5633Kernel: vmwgfx: reference count issue leads to use-after-free in surface handlingRed Hat · Red Hat Enterprise Linux 8 · CVSS 7.8 · 2023-10-23 | 7.8 | 0.3% | 2023-10-23 |
| CVE-2024-45783Grub2: fs/hfs+: refcount can be decremented twiceRedhat · grub2 · CVSS 4.4 · 2025-02-18 | 4.4 | 0.3% | 2025-02-18 |
| CVE-2021-47327iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get failsLinux · Linux · CVSS 7.1 · 2024-05-21 | 7.1 | 0.3% | 2024-05-21 |
| CVE-2026-46099net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnelsLinux · Linux · CVSS 8.1 · 2026-05-27 | 8.1 | 0.2% | 2026-05-27 |
| CVE-2020-11935aufs: improperly managed inode reference counts in the vfsub_dentry_open() methodUbuntu · Linux kernel (aufs filesystem module) · CVSS 4.4 · 2023-04-07 | 4.4 | 0.2% | 2023-04-07 |
| CVE-2026-19380Mullvad wireguard.sys IOCTL AdapterState reference countMullvad · wireguard.sys · CVSS 2.3 · 2026-08-10 | 2.3 | 0.2% | 2026-08-10 |
| CVE-2024-46972GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fenceImagination Technologies · Graphics DDK · CVSS 7.8 · 2024-12-28 | 7.8 | 0.2% | 2024-12-28 |
| CVE-2026-125191FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count LeakFFmpeg · FFmpeg · CVSS 4.7 · 2026-11-09 | 4.7 | 0.2% | 2026-11-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.