# CWE-911. Every Advisory and CVE whose sources give the weakness CWE-911, newest first. ## Records, newest first - [Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline](https://agentprime.io/advisories/CVE-2026-110753.md) `CVE-2026-110753` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption, CWE-911 - [Tor: Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux…](https://agentprime.io/advisories/CVE-2026-77587.md) `CVE-2026-77587` · CVE record: torproject Tor · CVSS 5.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-911 - [Jail reference count underflow](https://agentprime.io/advisories/CVE-2026-49419.md) `CVE-2026-49419` · CVE record: FreeBSD FreeBSD · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-911 - [Mullvad wireguard.sys IOCTL AdapterState reference count](https://agentprime.io/advisories/CVE-2026-19380.md) `CVE-2026-19380` · CVE record: Mullvad wireguard.sys · CVSS 4.6 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-664, CWE-911 - [net: skbuff: fix missing zerocopy reference in pskb_carve helpers](https://agentprime.io/advisories/CVE-2026-52943.md) `CVE-2026-52943` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Memory corruption, CWE-911 - [KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry](https://agentprime.io/advisories/CVE-2026-46316.md) `CVE-2026-46316` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, CWE-911 - [net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels](https://agentprime.io/advisories/CVE-2026-46099.md) `CVE-2026-46099` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 27 May 2026 · Tags: Memory corruption, CWE-911 - [Jostle logic bypass degrades resolution performance](https://agentprime.io/advisories/CVE-2026-42534.md) `CVE-2026-42534` · CVE record: NLnet Labs Unbound · CVSS 6.9 Medium · Not analysed yet · Published 20 May 2026 · Tags: CWE-440, CWE-911 - [Grub2: fs/hfs+: refcount can be decremented twice](https://agentprime.io/advisories/CVE-2024-45783.md) `CVE-2024-45783` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-911 - [GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence](https://agentprime.io/advisories/CVE-2024-46972.md) `CVE-2024-46972` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-911 - [umtx Kernel panic or Use-After-Free](https://agentprime.io/advisories/CVE-2024-43102.md) `CVE-2024-43102` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-911 - [iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails](https://agentprime.io/advisories/CVE-2021-47327.md) `CVE-2021-47327` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 21 May 2024 · Tags: CWE-911 - [Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling](https://agentprime.io/advisories/CVE-2023-5633.md) `CVE-2023-5633` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2023 · Tags: CWE-911 - [A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events.](https://agentprime.io/advisories/CVE-2023-2019.md) `CVE-2023-2019` · CVE record: Linux kernel's netdevsim device driver · CVSS 4.4 Medium · Not analysed yet · Published 24 Apr 2023 · Tags: CWE-911 - [aufs: improperly managed inode reference counts in the vfsub_dentry_open() method](https://agentprime.io/advisories/CVE-2020-11935.md) `CVE-2020-11935` · CVE record: Ubuntu Linux kernel (aufs filesystem module) · CVSS 4.4 Medium · Not analysed yet · Published 7 Apr 2023 · Tags: CWE-911 - [Unified Automation OPC UA C++ Demo Server: This vulnerability allows remote attackers to create a denial-of-service condition on…](https://agentprime.io/advisories/CVE-2022-37012.md) `CVE-2022-37012` · CVE record: Unified Automation OPC UA C++ Demo Server · CVSS 7.5 High · Not analysed yet · Published 29 Mar 2023 · Tags: CWE-911 - [Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls](https://agentprime.io/advisories/CVE-2023-22394.md) `CVE-2023-22394` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-911 - [kernel: An issue was discovered in the Linux Kernel from 4.18 to 4.19…](https://agentprime.io/advisories/CVE-2022-1678.md) `CVE-2022-1678` · CVE record: kernel · CVSS 5.9 Medium · Not analysed yet · Published 25 May 2022 · Tags: CWE-911 - [Linux Kernel: Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows…](https://agentprime.io/advisories/CVE-2022-29581.md) `CVE-2022-29581` · CVE record: Linux Kernel · CVSS 7.8 High · Not analysed yet · Published 17 May 2022 · Tags: CWE-911 - [Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash](https://agentprime.io/advisories/CVE-2022-22195.md) `CVE-2022-22195` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-911 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .