CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18...5.7 Medium
- apple ipados, macos, tvos +3 more +5 moreA null pointer dereference was addressed with improved input validation. This issue is fixed in...5.7 Medium
- sonos era 300, s1, s2 +2 moreSonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability8.8 High
- luxion keyshotLuxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
macroquadcrates.iomacroquad vulnerable to multiple soundness issues8.7 High- linux, linux kernel +1 moreHSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition7.8 High
- linux, linux kernel +1 morecan: peak_usb: fix use after free bugs8.8 High
- linux, linux kernel +1 morecan: vxcan: vxcan_xmit: fix use after free bug7.8 High
- linux, linux kernel +1 morecan: dev: can_restart: fix use after free bug8.8 High
- google chromeos, chrome os +1 moreA race condition Use-After-Free vulnerability exists in the virtio_transport_space_update...8.1 High
- google chromeos, chrome os +1 moreComponentInstaller Modification in ComponentInstaller in Google ChromeOS 124.0.6367.34 on...6.5 Medium
- google chromeUse after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to...8.8 High
- linux, linux kernel +1 moremd: fix mddev uaf while iterating all_mddevs list7.8 High
- linux, linux kernel +1 moredrm/vkms: Fix use after free and double free on init error7.8 High
- linux, linux kernel +1 moreRDMA/erdma: Prevent use-after-free in erdma_accept_newconn()9.8 Critical
- linux, linux kernel +1 moreRDMA/core: Fix use-after-free when rename device name7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint7.8 High
- linux, linux kernel +1 moreublk: make sure ubq->canceling is set when queue is frozen7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in ksmbd_sessions_deregister()8.8 High
- debian linux, linux kernel +1 moreksmbd: fix session use-after-free in multichannel connection8.8 High
- linux, linux kernel +1 moreexfat: fix random stack corruption after get_block7.8 High
- linux, linux kernel +1 moretracing: Fix use-after-free in print_graph_function_flags during tracer switching7.8 High
- linux, linux kernel +1 morenfsd: fix management of listener transports5.5 Medium
- linux, linux kernel +1 morePCI/ASPM: Fix link state exit during switch upstream function removal7.8 High
- linux, linux kernel +1 moreusb: xhci: Don't skip on Stopped - Length Invalid7.8 High
- linux, linux kernel +1 morememstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove7.8 High
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`3.7 Low
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Digital Media Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +10 more +12 moreWindows Shell Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Hyper-V Remote Code Execution Vulnerability7.1 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 moreWindows Secure Channel Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Digital Media Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreRPC Endpoint Mapper Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2012 +13 more +15 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreLightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability8.1 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 moreWindows Secure Channel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Digital Media Elevation of Privilege Vulnerability7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +9 more +11 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Elevation of Privilege Vulnerability7.3 High
- microsoft excel, office, 365 apps +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- Show moreLoading…