cve.bz

CWE-416: Use After Free, page 10

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-83679EPSS 0.4%

    Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-83675EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-83644EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-83584EPSS 0.3%

    Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

  5. 4.7CVE-2026-83582EPSS 0.4%

    Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

  6. 7.0CVE-2026-83575EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  7. 7.0CVE-2026-83574EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-83570EPSS 0.4%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2026-83566EPSS 0.3%

    Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-83564EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-81971EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

  12. 7.0CVE-2026-72969EPSS 0.3%

    Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-72968EPSS 0.3%

    Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  14. 7.0CVE-2026-72955EPSS 0.3%

    Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

  15. 7.0CVE-2026-72934EPSS 0.3%

    Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  16. 7.0CVE-2026-71347EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

  17. 7.0CVE-2026-70276EPSS 0.3%

    Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-70274EPSS 0.4%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  19. 7.0CVE-2026-70273EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  20. 7.0CVE-2026-70272EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-70271EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-70253EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-70252EPSS 0.3%

    Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

  24. 8.8CVE-2026-70250EPSS 0.5%

    Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

  25. 7.0CVE-2026-70249EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  26. 7.0CVE-2026-70243EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  27. 7.0CVE-2026-70241EPSS 0.3%

    Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-70237EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-70236EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  30. 7.0CVE-2026-70230EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  31. 7.0CVE-2026-70223EPSS 0.3%

    Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

  32. 8.8CVE-2026-70215EPSS 0.9%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  33. 7.0CVE-2026-70209EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  34. 5.5CVE-2026-70201EPSS 0.5%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

  35. 7.0CVE-2026-70198EPSS 0.3%

    Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  36. 4.7CVE-2026-70195EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

  37. 8.1CVE-2026-70187EPSS 0.8%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  38. 7.0CVE-2026-70176EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-70169EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-70168EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  41. 7.0CVE-2026-70164EPSS 0.3%

    Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  42. 7.0CVE-2026-70160EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  43. 7.0CVE-2026-70156EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  44. 7.8CVE-2026-70151EPSS 0.4%

    Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  45. 7.0CVE-2026-70150EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-70144EPSS 0.4%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2026-70140EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  48. 7.0CVE-2026-70136EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  49. 7.0CVE-2026-70134EPSS 0.3%

    Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

  50. 8.1CVE-2026-70127EPSS 0.8%

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.