CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Image Acquisition Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Wireless Networking Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreConnected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Devices Human Interface Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Management Instrumentation Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreAudio Video Control Transport Protocol Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Error Reporting Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreRemote Desktop Gateway Service Elevation of Privilege Vulnerability7.1 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows Win32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows DNS Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Device Association Service Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows License Manager Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreRemote Desktop Licensing Service Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreConnected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Print Spooler Components Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreConnected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Image Acquisition Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service6.0 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUse-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service7.2 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreRace Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service6.0 Medium
- arm ltd 5th gen gpu architecture userspace driver, valhall gpu userspace driver +1 moreMali GPU Userspace Driver allows access to already freed memory5.1 Medium
- arm ltd 5th gen gpu architecture userspace driver, bifrost gpu userspace driver, valhall gpu userspace driver +2 moreMali GPU Userspace Driver allows access to already freed memory7.8 High
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Use-After-Free in load_mon7.1 High
- imagemagickImageMagick before 7.1.2-30 Heap-use-after-free via Layer4.8 Medium
- imagemagickImageMagick before 7.1.2-30 Heap-use-after-free via GetList4.8 Medium
- strongswanlibcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision...7.5 High
- openvpn ovpn-dco-winA use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6...6.8 Medium
- mediatek, inc. mediatek chipsetIn geniezone, there is a possible escalation of privilege due to use after free. This could lead...6.7 Medium
- mediatek, inc. mediatek chipsetIn gpu, there is a possible system crash due to use after free. This could lead to local...5.0 Medium
- mediatek, inc. mediatek chipsetIn SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead...6.7 Medium
- mediatek, inc. mediatek chipsetIn Audio HAL, there is a possible escalation of privilege due to use after free. This could lead...6.7 Medium
- mediatek, inc. mediatek chipsetIn Audio HAL, there is a possible escalation of privilege due to use after free. This could lead...6.7 Medium
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup6.0 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +3 more +5 moreLibsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload7.6 High
- openvpnThe fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2...7.2 High
- google chromeUse after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to...8.8 High
- google chromeUse after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker...8.3 High
- google chromeUse after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to...9.6 Critical
- curlOpenSSL provider use-after-free7.5 High
- curlHTTP/2 server push UAF9.1 Critical
- google chromeUse after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker...8.8 High
- Show moreLoading…