CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft office, word, 365 apps +11 more +13 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +6 more +8 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +12 more +14 moreMicrosoft Office Remote Code Execution Vulnerability7.0 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Search Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWindows Media Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWorkspace Broker Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft MPEG-2 Video Extension Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Notification Elevation of Privilege Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Input Method Editor (IME) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 22h2, windows 11 22h2 +1 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreUniversal Print Management Service Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability7.8 High
- qualcomm fastconnect 7800 firmware, qmp1000 firmware, sm8735 firmware +23 more +25 moreUse After Free in DSP Service7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +38 more +40 moreUse After Free in Camera7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +18 more +20 moreUse After Free in Display7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +38 more +40 moreUse After Free in Display7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreaf_unix: Don't leave consecutive consumed OOB skbs.7.8 High
- huawei emui, harmonyos +1 moreVirtual address reuse issue in the memory management module, which can be exploited by non...6.6 Medium
- debian linux, linux kernel +1 moremedia: vidtv: Terminating the subsequent process of initialization failure7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreipc: fix to protect IPCS lookups using RCU7.8 High
- debian linux, linux kernel +1 moreRDMA/iwcm: Fix use-after-free of work objects after cm_id destruction9.8 Critical
- linux, linux kernel +1 morenvme-tcp: remove tag set when second admin queue config fails9.8 Critical
- linux, linux kernel +1 moredrm/nouveau: fix a use-after-free in r535_gsp_rpc_push()7.8 High
- debian linux, linux kernel +1 morenet: atm: fix /proc/net/atm/lec handling7.8 High
- linux, linux kernel +1 morebinder: fix use-after-free in binderfs_evict_inode()7.8 High
- linux, linux kernel +1 morebinder: fix yet another UAF in binder_devices7.8 High
- linux, linux kernel +1 moreerofs: avoid using multiple devices with different type7.8 High
- debian linux, linux kernel +1 morebpf, sockmap: Avoid using sk_socket after free when sending7.8 High
- linux, linux kernel +1 moredm: fix dm_blk_report_zones7.8 High
- linux, linux kernel +1 morePCI/pwrctrl: Cancel outstanding rescan work when unregistering7.8 High
- debian linux, linux kernel +1 morecoresight: prevent deactivate active config while enabling the config7.8 High
- linux, linux kernel +1 morepage_pool: Fix use-after-free in page_pool_recycle_in_ring7.8 High
- debian linux, linux kernel +1 moreBluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete7.8 High
- linux, linux kernel +1 moreBluetooth: MGMT: Protect mgmt_pending list with its own lock7.8 High
- linux, linux kernel +1 morewifi: ath12k: fix uaf in ath12k_core_init()7.8 High
- linux, linux kernel +1 morenet/mlx5: Fix ECVF vports unload on shutdown flow7.8 High
- linux, linux kernel +1 moreio_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()7.8 High
- freedesktop popplerPoppler Use After Free Vulnerability5.5 Medium
- linux, linux kernel +1 morenet/sched: fix use-after-free in taprio_dev_notifier7.8 High
- samsung rlottieUse After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This...5.1 Medium
- hdfgroup hdf5HDF5 H5FL.c H5FL__reg_gc_list use after free4.8 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server5.0 Medium
- Show moreLoading…