CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morenet: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback7.0 High
- linux, linux kernel +1 moremm/damon/core: remove call_control in inactive contexts7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix use-after-free in inet6_addr_del().7.8 High
- linux, linux kernel +1 moredst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()7.8 High
- linux, linux kernel +1 moremacvlan: fix possible UAF in macvlan_forward_source()7.8 High
- linux, linux kernel +1 morenet/sched: sch_qfq: do not free existing class in qfq_change_class()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: tegra-adma: Fix use-after-free7.8 High
oneshotcrates.iooneshot has potential Use After Free when used asynchronously8.2 High- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP9.8 Critical
- linux, linux kernel +1 moreublk: fix use-after-free in ublk_partition_scan_work7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenfsd: provide locking for v4_end_grace7.8 High
- linux, linux kernel +1 morebtrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node()9.8 Critical
- trimble sketchupTrimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability8.1 High
- oisf suricataSuricata detect/alert: heap-use-after-free on alert queue expansion7.4 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreHeap-use-after-free in gdi_set_bounds7.7 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreHeap-use-after-free in update_pointer_new7.7 High
- quickjs-ng quickjsquickjs-ng quickjs Atomics Ops quickjs.c use after free5.3 Medium
- assimpOpen Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free4.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process7.5 High
- schneider electric ecostruxure power build rapsody, schneider-electric ecostruxure power build - rapsody +1 moreCWE-416: Use After Free vulnerability that could cause remote code execution when the end user...8.4 High
- freerdpFreeRDP has a heap-use-after-free in irp_thread_func6.8 Medium
- freerdpFreeRDP has a heap-use-after-free in create_irp_thread6.8 Medium
- freerdpFreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl->primary)6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: seqiv - Do not use req->iv after crypto_aead_encrypt7.5 High
- linux, linux kernel +1 moremm/slub: reset KASAN tag in defer_free() before accessing freed memory7.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to...8.8 High
- freeimage project freeimageFreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().9.8 Critical
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows sdk, windows software development kit +1 moreInbox COM Objects (Global Memory) Remote Code Execution Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability7.5 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreCapability Access Management Service (camsvc) Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2025, windows server 2025 (server core installation) +1 moreCapability Access Management Service (camsvc) Elevation of Privilege Vulnerability7.0 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows server 2022, windows server 2022, 23h2 edition (server core installation) +2 more +4 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…