CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- akamai guardicore platform agentA use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform...4.7 Medium
- akamai guardicore platform agentA use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore...4.4 Medium
- the libreswan project libreswanIKEv2 Use-After-Free bug when using IKE-over-TCP7.5 High
- google chromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote...8.3 High
- google chromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who...8.3 High
- google chromeUse after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who...8.3 High
- google chromeUse after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...4.3 Medium
- google chromeUse after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote...9.6 Critical
- google chromeUse after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...8.8 High
- google chromeUse after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...9.6 Critical
- microsoft sql server 2019 (gdr), sql server 2019 for x64-based systems (cu32), sql server 2022 (gdr) +6 more +8 moreMicrosoft SQL Server Elevation of Privilege Vulnerability7.0 High
- adobe substance 3d stagerSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h2 +3 more +5 moreWindows Autopilot Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft OpenSSH for Windows Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreHID Class Driver Elevation of Privilege Vulnerability6.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows VHD miniport driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +16 more +18 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreMicrosoft Windows Media Foundation Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…