CWE-416: Use After Free, page 122
Filter
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
What the weakness is: CWE-416 at MITRE
Ask an AI about CWE-416
Show the prompt
Explain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2022-29919EPSS 0.2%
Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.8CVE-2023-29336KEVExploitEPSS 41%
Win32k Elevation of Privilege Vulnerability
- 7.5CVE-2023-29325EPSS 84%
Windows OLE Remote Code Execution Vulnerability
- 7.8CVE-2023-24953EPSS 0.7%
Microsoft Excel Remote Code Execution Vulnerability
- 8.8CVE-2023-24947EPSS 0.7%
Windows Bluetooth Driver Remote Code Execution Vulnerability
- 5.5CVE-2023-31974EPSS 0.3%
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
- 5.5CVE-2023-31972EPSS 0.3%
yasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
- 4.4CVE-2022-48386EPSS 0.09%
the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed.
- 6.7CVE-2023-2513EPSS 0.2%
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined beh…
- 7.8CVE-2023-32233EPSS 13%
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. T…
- 7.8CVE-2023-27969EPSS 0.2%
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code w…
- 6.7CVE-2023-32269EPSS 0.3%
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this…
- 7.8CVE-2020-22429EPSS 0.3%
redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function at /src/header/netdb/mod.rs.
- 8.8CVE-2023-2461EPSS 0.8%
Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium…
- 7.8CVE-2022-33292EPSS 0.1%
Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.
- 7.8CVE-2023-2236EPSS 0.4%
A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflo…
- 7.8CVE-2023-2235EPSS 0.2%
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_even…
- 7.8CVE-2023-30549EPSS 0.4%
Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and installations that include apptainer-suid < 1.1.8 on older operating systems where…
- 8.8CVE-2023-27352EPSS 0.8%
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the pro…
- 5.5CVE-2023-2162EPSS 0.2%
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.
- 9.8CVE-2023-21096EPSS 0.5%
In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- 4.9CVE-2023-30612EPSS 0.4%
Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hypervisor process via sending malicious HTTP request through the HTTP API socket. As …
- 7.5CVE-2023-2135EPSS 1.0%
Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity…
- 5.3CVE-2023-28984EPSS 0.2%
A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Servic…
- 5.5CVE-2023-28980EPSS 0.2%
A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service (DoS). In a rib sharding scenario the rp…
- 6.4CVE-2023-30772EPSS 0.5%
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.
- 5.3CVE-2023-29132EPSS 0.8%
Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.
- 7.8CVE-2023-26414EPSS 0.4%
Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
- 7.8CVE-2023-26410EPSS 0.4%
Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…
- 7.8CVE-2022-33298EPSS 0.1%
Memory corruption due to use after free in Modem while modem initialization.
- 7.8CVE-2023-26392EPSS 0.4%
Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…
- 7.8CVE-2023-26384EPSS 0.4%
Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…
- 7.8CVE-2023-22235EPSS 0.4%
InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…
- 7.8CVE-2023-26424EPSS 2.7%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 7.8CVE-2023-26423EPSS 3.1%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 7.8CVE-2023-26422EPSS 3.1%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 7.8CVE-2023-26420EPSS 2.7%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 7.8CVE-2023-26419EPSS 2.7%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 7.8CVE-2023-26418EPSS 2.7%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 7.8CVE-2023-26417EPSS 2.6%
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i…
- 4.7CVE-2023-1990EPSS 0.2%
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.
- 7.0CVE-2023-1872EPSS 0.3%
A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerabili…
- 7.8CVE-2023-1829EPSS 1.1%
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect h…
- 6.6CVE-2023-28308EPSS 0.9%
Windows DNS Server Remote Code Execution Vulnerability
- 6.6CVE-2023-28307EPSS 0.9%
Windows DNS Server Remote Code Execution Vulnerability
- 6.6CVE-2023-28306EPSS 0.9%
Windows DNS Server Remote Code Execution Vulnerability
- 6.6CVE-2023-28305EPSS 0.9%
Windows DNS Server Remote Code Execution Vulnerability
- 8.8CVE-2023-28297EPSS 1.7%
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
- 7.8CVE-2023-28285ExploitEPSS 3.0%
Microsoft Office Remote Code Execution Vulnerability
- 6.6CVE-2023-28223EPSS 1.1%
Windows Domain Name Service Remote Code Execution Vulnerability