CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Also known as Dangling pointer, UAF, Use-After-Free.
A kind of CWE-825 Expired Pointer Dereference.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUse after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a...9.6 Critical
- google chromeMemory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeMemory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- tanium endpoint configuration toolset solution, threat-response-cx +1 moreTanium addressed a use-after-free vulnerability in Threat Response Client Extension.2.5 Low
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: GC component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics: WebRender component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the XPCOM component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Images, Video, and HTML Frames component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Animation component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Disability Access APIs component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the WebRTC: Signaling component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Signaling component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Widget component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Graphics: WebRender component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Networking: DNS component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Print Preview component9.6 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Panning and Zooming component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Positioned component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG component6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the XML component6.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout component6.3 Medium
- Show moreLoading…