CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows TCP/IP Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows SMB Client Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows WAN ARP Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TCP/IP Information Disclosure Vulnerability7.5 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Win32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWin32k Elevation of Privilege Vulnerability7.8 High
- No product listedUse after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2...6.8 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-after-free in the JavaScript: WebAssembly component7.3 High
- eximExim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...5.3 Medium
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.5 High
- apple macos, safari, red hat enterprise linux 6 +13 more +15 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...7.5 High
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.5 High
- apple ipados, macos, safari +19 more +21 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...6.5 Medium
- linux, linux kernel +1 moreASoC: soc-core: flush delayed work before removing DAIs and widgets7.3 High
- linux, linux kernel +1 moreserial: caif: hold tty->link reference in ldisc_open and ser_release7.8 High
- linux, linux kernel +1 moreiavf: fix PTP use-after-free during reset7.8 High
- linux, linux kernel +1 morenet/mana: Null service_wq on setup error to prevent double destroy7.8 High
- linux, linux kernel +1 moresched_ext: Remove redundant css_put() in scx_cgroup_init()7.8 High
- linux, linux kernel +1 moreALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()7.8 High
- linux, linux kernel +1 moreusb: renesas_usbhs: fix use-after-free in ISR during device removal7.8 High
- linux, linux kernel +1 morekthread: consolidate kthread exit paths to prevent use-after-free9.8 Critical
- linux, linux kernel +1 moremm/damon/core: clear walk_control on inactive context in damos_walk()7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()9.8 Critical
- linux, linux kernel +1 moresmb: server: fix use-after-free in smb2_open()9.8 Critical
- linux, linux kernel +1 moreksmbd: fix use-after-free by using call_rcu() for oplock_info9.8 Critical
- linux, linux kernel +1 morenet: nexthop: fix percpu use-after-free in remove_nh_grp_entry7.8 High
- linux, linux kernel +1 moredrm/amdgpu: Fix use-after-free race in VM acquire7.8 High
- linux, linux kernel +1 moreipv6: prevent possible UaF in addrconf_permanent_addr()7.8 High
- linux, linux kernel +1 morethermal: core: Fix thermal zone device registration error path7.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: Fix UAF in le_read_features_complete8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/page_alloc: clear page->private in free_pages_prepare()7.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.28.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreUse-after-free in the DOM: Networking component7.3 High
- phpSoapServer session-persisted object use-after-free via SOAP header fault6.3 Medium
- php, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreUse-After-Free in SOAP using Apache map9.5 Critical
- google chromeUse after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeUse after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker...8.8 High
- google chromeUse After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96...8.3 High
- google chromeUse after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- Show moreLoading…