CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Remote Desktop Services Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Graphics Component Denial of Service Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreInbox COM Objects (Global Memory) Remote Code Execution Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreInbox COM Objects (Global Memory) Remote Code Execution Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability4.7 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +15 more +17 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +14 more +16 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +15 more +17 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows NTFS Elevation of Privilege Vulnerability7.4 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Device Association Broker Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +10 more +12 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.4 High
- mozilla firefox, thunderbird +1 moreUse-after-free caused by the native messaging web extension API on Windows9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in MediaTrackGraphImpl::GetInstance()9.8 Critical
- rathenarAthena map-server use-after-free vulnerability in RODEX7.5 High
- huawei harmonyosUse After Free (UAF) vulnerability in the storage management module. Successful exploitation of...8.4 High
- huawei harmonyosUse After Free (UAF) vulnerability in the office service. Successful exploitation of this...7.8 High
- popplerGHSL-2025-042: Poppler has Use-After-Free6.1 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use...7.0 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreA use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier....8.4 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 7800 firmware +36 more +38 moreUse After Free in DSP Service7.8 High
- qualcomm qcc5161 firmware, qcc7225 firmware, qcc7226 firmware +6 more +8 moreUse After Free in BT Controller7.1 High
- google chromeUse after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to...8.8 High
fuel-vmcrates.ioFuelVM is vulnerable to heap memory allocation re-use bug8.7 High- linux, linux kernel +1 moreblk-mq: use quiesced elevator switch when reinitializing queues7.8 High
- linux, linux kernel +1 moremedia: si470x: Fix use-after-free in si470x_int_in_callback()7.8 High
- linux, linux kernel +1 moreocteon_ep: cancel queued works in probe error path7.0 High
- linux, linux kernel +1 moreclk: microchip: fix potential UAF in auxdev release callback7.8 High
- linux, linux kernel +1 morefs: dlm: fix use after free in midcomms commit9.8 Critical
- linux, linux kernel +1 morenetfilter: conntrack: Avoid nf_ct_helper_hash uses after free7.8 High
- ffmpegHeap-buffer-overflow write in FFmpeg SANM process_ftch8.7 High
- linux, linux kernel +1 morenilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()7.8 High
- linux, linux kernel +1 morering-buffer: Sync IRQ works before buffer destruction7.8 High
- linux, linux kernel +1 morefs/ntfs3: Validate data run offset7.8 High
- linux, linux kernel +1 moredrm/msm: fix use-after-free on probe deferral7.8 High
- linux, linux kernel +1 moretracing/histograms: Add histograms to hist_vars if they have referenced variables7.8 High
- linux, linux kernel +1 moref2fs: fix to avoid use-after-free for cached IPU bio7.8 High
- linux, linux kernel +1 moreum: virtio_uml: Fix use-after-free after put_device in probe7.8 High
- linux, linux kernel +1 morecnic: Fix use-after-free bugs in cnic_delete_task7.8 High
- linux, linux kernel +1 moreocteontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()7.8 High
- redis, lfprojects valkey +1 moreRedis Lua Use-After-Free may lead to remote code execution10.0 Critical
- qtUse-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG9.4 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-free7.5 High
- keyence vt studioVT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a...7.1 High
- google chromeUse after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to...3.1 Low
- linux, linux kernel +1 morevirtio-mmio: don't break lifecycle of vm_dev7.8 High
- Show moreLoading…