CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morepadata: Fix pd UAF once and for all7.0 High
- linux, linux kernel +1 moreext4: fix inode use after free in ext4_end_io_rsv_work()7.8 High
- debian linux, linux kernel +1 moref2fs: fix to avoid UAF in f2fs_sync_inode_meta()7.8 High
- debian linux, linux kernel +1 moref2fs: fix to avoid panic in f2fs_evict_inode7.8 High
- linux, linux kernel +1 moreeth: fbnic: unlink NAPIs from queues on error to open7.8 High
- debian linux, linux kernel +1 moreusb: gadget : fix use-after-free in composite_dev_cleanup()7.8 High
- linux, linux kernel +1 moremm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped7.8 High
- linux, linux kernel +1 morenet: airoha: fix potential use-after-free in airoha_npu_get()7.8 High
- debian linux, linux kernel +1 moresmb: client: fix use-after-free in cifs_oplock_break9.8 Critical
- px4 px4-autopilotPX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free2.0 Low
libcoapUbuntu,libcoap2Ubuntu,libcoap3Ubuntu +2 moreA use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of...9.8 Critical- google chromeUse after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who...8.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe incopyInCopy | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- adobe animateAnimate | Use After Free (CWE-416)5.5 Medium
- adobe animateAnimate | Use After Free (CWE-416)7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +4 more +6 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreDesktop Windows Manager Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +8 more +10 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Kernel Transaction Manager Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreRemote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Graphics Component Elevation of Privilege Vulnerability6.7 Medium
- microsoft office, powerpoint, 365 apps +6 more +8 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- adobe illustratorIllustrator | Use After Free (CWE-416)5.5 Medium
- debian linux, linux kernel +1 morexfrm: interface: fix use-after-free after changing collect_md xfrm interface7.8 High
- vimVim heap use-after-free vulnerability when processing recursive tuple data types6.9 Medium
- nasm netwide assember, netwide assembler +1 moreNASM Netwide Assember preproc.c do_directive use after free4.8 Medium
- Show moreLoading…