CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix user-after-free8.8 High
- linux, linux kernel +1 morestaging: vme_user: Fix possible UAF in tsi148_dma_list_add7.8 High
- linux, linux kernel +1 moredrm/meson: reorder driver deinit sequence to fix use-after-free bug7.8 High
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- linux, linux kernel +1 moreksmbd: fix racy issue under cocurrent smb2 tree disconnect8.8 High
- linux, linux kernel +1 morefs: fix UAF/GPF bug in nilfs_mdt_destroy7.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- linux, linux kernel +1 moredrm/msm/dp: Free resources after unregistering them7.8 High
- linux, linux kernel +1 morenilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput7.8 High
- linux, linux kernel +1 morerbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morenet: rose: convert 'use' field to refcount_t8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreHID: asus: fix UAF via HID_CLAIMED_INPUT validation7.8 High
- bmc control-m/agentBMC Control-M/Agent memory corruption in SSL/TLS communication8.4 High
- linux, linux kernel +1 morescsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write7.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- linux, linux kernel +1 morejbd2: fix potential use-after-free in jbd2_fc_wait_bufs7.8 High
- linux, linux kernel +1 moreHID: nvidia-shield: Reference hid_device devm allocation of input_dev name8.8 High
- linux, linux kernel +1 moreip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed7.8 High
- linux, linux kernel +1 moreASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()7.8 High
- linux, linux kernel +1 morebtrfs: fix extent map use-after-free when handling missing device in read_one_chunk7.8 High
- linux, linux kernel +1 moremedia: netup_unidvb: fix use-after-free at del_timer()7.8 High
- linux, linux kernel +1 moreqlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure5.5 Medium
- linux, linux kernel +1 moremtd: core: add missing of_node_get() in dynamic partitions code7.8 High
- linux, linux kernel +1 morefs/ntfs3: Add length check in indx_get_root8.4 High
- linux, linux kernel +1 morebtrfs: fix use-after-free of new block group that became unused7.8 High
- linux, linux kernel +1 morewifi: cfg80211: Fix use after free for wext7.8 High
- linux, linux kernel +1 moredrm/meson: remove drm bridges at aggregate driver unbind time7.8 High
- linux, linux kernel +1 moreigb: Do not free q_vector unless new one was allocated7.8 High
- linux, linux kernel +1 morerapidio: fix possible UAF when kfifo_alloc() fails7.8 High
- linux, linux kernel +1 moreandroid: binder: stop saving a pointer to the VMA7.8 High
- opensynergy blue sdkOpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists...9.8 Critical
- linux, linux kernel +1 moredrm/hisilicon/hibmc: fix irq_request()'s irq name variable is local7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremm/debug_vm_pgtable: clear page table entries at destroy_args()7.0 High
- linux, linux kernel +1 moredrm/xe/migrate: prevent potential UAF7.8 High
- google chromeUse after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a...8.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe premiere proPremiere Pro | Use After Free (CWE-416)7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Hyper-V Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows BitLocker Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows BitLocker Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreMicrosoft Virtual Hard Disk Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreCapability Access Management Service (camsvc) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +12 more +14 moreWindows Management Service Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…