cve.bz

CWE-416: Use After Free, page 12

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.0CVE-2026-69387EPSS 0.3%

    Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-61931EPSS 0.4%

    Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-108468EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-108465EPSS 0.3%

    Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.

  5. 7.0CVE-2026-108464EPSS 0.3%

    Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

  6. 7.0CVE-2026-108461EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  7. 8.1CVE-2026-108460EPSS 0.8%

    Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  8. 8.8CVE-2026-108458EPSS 0.9%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  9. 7.8CVE-2026-108136EPSS 0.4%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-108134EPSS 0.3%

    Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-105725EPSS 0.3%

    Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

  12. 7.0CVE-2026-105722EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  13. 7.5CVE-2026-105715EPSS 0.6%

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  14. 9.8CVE-2026-105010EPSS 1.0%

    Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

  15. 6.4CVE-2026-105006EPSS 0.3%

    Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

  16. 7.8CVE-2026-104342EPSS 0.4%

    Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi…

  17. 8.8CVE-2026-103575EPSS 0.9%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  18. 7.0CVE-2026-103565EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  19. 7.0CVE-2026-103554EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-102220EPSS 0.4%

    Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

  21. 8.8CVE-2026-102214EPSS 0.4%

    Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

  22. 7.0CVE-2026-102211EPSS 0.2%

    Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-102208EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-102201EPSS 0.4%

    Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-102197EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-102196EPSS 0.4%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  27. 7.0CVE-2026-102195EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-102194EPSS 0.3%

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-102193EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  30. 9.8CVE-2026-100219EPSS 1.1%

    Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

  31. 8.1CVE-2026-100218EPSS 0.8%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  32. 8.8CVE-2026-100212EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  33. 8.8CVE-2026-100211EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  34. 8.8CVE-2026-100209EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  35. 9.8CVE-2026-100202EPSS 1.1%

    Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

  36. 7.0CVE-2026-100200EPSS 0.3%

    Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

  37. 6.5CVE-2026-19940EPSS 0.2%

    The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps its struct bt_hfp_ag objects in a static pool indexed by ACL connection index. On link teardown, hfp_ag_disconnected() ca…

  38. 6.0CVE-2026-96297EPSS 0.2%

    Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read fr…

  39. 4.3CVE-2026-69150EPSS 0.1%

    KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a c…

  40. 8.7CVE-2026-109676EPSS 0.3%

    FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smart…

  41. 4.2CVE-2026-109765EPSS 0.2%

    Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  42. 5.4CVE-2026-109761EPSS 0.2%

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  43. 5.4CVE-2026-109752EPSS 0.2%

    Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  44. 5.4CVE-2026-109749EPSS 0.2%

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  45. 5.4CVE-2026-109748EPSS 0.2%

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  46. 5.4CVE-2026-109741EPSS 0.2%

    Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  47. 5.4CVE-2026-109738EPSS 0.2%

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  48. 5.4CVE-2026-109735EPSS 0.2%

    Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  49. 5.4CVE-2026-109732EPSS 0.2%

    Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  50. 5.4CVE-2026-109729EPSS 0.2%

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.