cve.bz

CWE-416: Use After Free, page 11

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.0CVE-2026-70118EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-70115EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-70102EPSS 0.4%

    Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-70086EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  5. 4.7CVE-2026-70077EPSS 0.4%

    Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

  6. 7.0CVE-2026-70076EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  7. 7.0CVE-2026-70067EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2026-70066EPSS 0.3%

    Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2026-70056EPSS 0.3%

    Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-70045EPSS 0.3%

    Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

  11. 8.1CVE-2026-70038EPSS 0.7%

    Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

  12. 7.0CVE-2026-70026EPSS 0.3%

    Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  13. 6.5CVE-2026-70025EPSS 1.1%

    Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

  14. 7.8CVE-2026-70023EPSS 0.4%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  15. 7.0CVE-2026-70021EPSS 0.3%

    Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  16. 7.5CVE-2026-70014EPSS 0.8%

    Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

  17. 8.1CVE-2026-70013EPSS 0.7%

    Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

  18. 7.5CVE-2026-70012EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  19. 7.5CVE-2026-70006EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  20. 7.5CVE-2026-70004EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  21. 7.5CVE-2026-69998EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  22. 7.5CVE-2026-69997EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  23. 7.5CVE-2026-69996EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  24. 7.5CVE-2026-69995EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  25. 7.5CVE-2026-69994EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  26. 7.5CVE-2026-69992EPSS 0.6%

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  27. 7.5CVE-2026-69991EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  28. 7.5CVE-2026-69988EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  29. 7.5CVE-2026-69987EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  30. 7.5CVE-2026-69986EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  31. 7.5CVE-2026-69984EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  32. 7.0CVE-2026-69977EPSS 0.3%

    Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

  33. 7.5CVE-2026-69976EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  34. 7.0CVE-2026-69964EPSS 0.3%

    Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-69935EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  36. 7.0CVE-2026-69931EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.

  37. 7.0CVE-2026-69915EPSS 0.3%

    Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

  38. 8.1CVE-2026-69913EPSS 0.7%

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  39. 9.8CVE-2026-69883EPSS 0.9%

    Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

  40. 7.0CVE-2026-69856EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  41. 7.0CVE-2026-69840EPSS 0.3%

    Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.

  42. 8.1CVE-2026-69830EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  43. 7.8CVE-2026-69798EPSS 0.4%

    Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-69766EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  45. 8.8CVE-2026-69765EPSS 0.8%

    Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

  46. 7.0CVE-2026-69763EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2026-69743EPSS 0.3%

    Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  48. 7.0CVE-2026-69736EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

  49. 7.0CVE-2026-69596EPSS 0.3%

    Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  50. 7.1CVE-2026-69452EPSS 0.7%

    Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.