CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +4 more +6 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Server Update Service (WSUS) Elevation of Privilege Vulnerability7.0 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows User Interface Core Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Push Notifications Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Push Notifications Elevation of Privilege Vulnerability7.8 High
- microsoft remote desktop client, remote desktop client for windows desktop, windows 11 version 26h1 +14 more +16 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows UPnP Device Host Remote Code Execution Vulnerability7.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Speech Brokered Api Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Speech Brokered Api Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows UPnP Device Host Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Projected File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +6 more +8 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows UPnP Device Host Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Server Update Service (WSUS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Push Notifications Elevation of Privilege Vulnerability8.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows Shell Elevation of Privilege Vulnerability7.0 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Use After Free (CWE-416)7.8 High
- mozilla thin-vec, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreUse-After-Free and Double-Free in IntoIter::drop when element drop panics5.1 Medium
- imagemagickImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values5.5 Medium
- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +22 more +24 moreUse-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure9.1 Critical
- linux, linux kernel +1 moreACPI: EC: clean up handlers on probe failure in acpi_ec_setup()7.0 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morenet: bonding: fix use-after-free in bond_xmit_broadcast()7.8 High
- huawei emui, harmonyos +1 moreUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability...5.9 Medium
- huawei emui, harmonyos +1 moreUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability...5.7 Medium
- gonitro nitro pdf proNitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the...8.4 High
- nasm, nasm netwide assembler +1 moreCVE-2026-60689.6 Critical
- wolfsslHeap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.36.3 Medium
- hdfgroup hdf5, red hat enterprise linux ai (rhel ai) 3 +1 moreHDF5: H5T__conv_struct Use After Free7.8 High
- libpng, debian linux +1 moreLIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure5.1 Medium
- bytecodealliance wasmtimeWasmtime has a use-after-free bug after cloning `wasmtime::Linker`1.0 Low
- google chromeUse after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeUse after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeUse after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who...9.6 Critical
- google chromeUse after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- openprinting cupsCUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer4.0 Medium
- apache kafka, apache software foundation kafka clients +1 moreApache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition8.7 High
- openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePotential Use-after-free in DANE Client Code8.1 High
- qualcomm cologne firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +21 more +23 moreUse After Free in DSP Service7.8 High
- Show moreLoading…