CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XSLT component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Core & HTML component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Canvas2D component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Storage: IndexedDB component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Content Processes component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Networking: Cache component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Content Processes component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget component8.8 High
- facebook proxygenIn proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams ...7.5 High
- facebook proxygenIn proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction:...5.3 Medium
- facebook proxygenIn proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its...7.3 High
- meta platforms, inc moxygenIn moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read...7.5 High
- wiresharkUse After Free in Wireshark5.5 Medium
- wolfsslHeap use-after-free on read during bidirectional (D)TLS shutdown2.3 Low
- linux, linux kernel +1 morecgroup: Avoid iteration of dying tasks with zero refcount7.8 High
- nationalsecurityagency ghidraGhidra through 12.1.4 Heap Use-After-Free in Decompiler4.8 Medium
- google chromeUse after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...8.8 High
- google chromeUse after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...8.3 High
- google chromeUse after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who...8.3 High
- google chromeUse after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who...8.3 High
- google chromeUse after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote...9.6 Critical
- google chromeUse after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- google chromeUse after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...9.6 Critical
- google chromeUse after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- google chromeUse after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.1 High
- google chromeUse after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who...8.3 High
- google chromeUse after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to...7.8 High
- google chromeUse after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to...7.8 High
- google chromeUse after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...9.6 Critical
- kitty project kittyUse after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer4.6 Medium
- gnome gnumericGnumeric: gnumeric: heap use-after-free when opening a malformed workbook5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreQemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape8.8 High
- linux, linux kernel +1 moredrm/msm: Recover HW before retire hung submit5.5 Medium
- linux, linux kernel +1 moreACPI: platform: Use acpi_bus_get_primary_device()7.8 High
- Show moreLoading…