cve.bz

CWE-416: Use After Free, page 14

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-106269EPSS 0.3%

    Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

  2. 8.8CVE-2026-106268EPSS 0.4%

    Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  3. 8.8CVE-2026-106257EPSS 0.3%

    Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  4. 8.8CVE-2026-106248EPSS 0.3%

    Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  5. 8.8CVE-2026-106235EPSS 0.4%

    Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  6. 9.6CVE-2026-106234EPSS 0.3%

    Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity…

  7. 8.3CVE-2026-106233EPSS 0.4%

    Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  8. 9.6CVE-2026-106227EPSS 0.4%

    Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  9. 9.6CVE-2026-106211EPSS 0.5%

    Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  10. 8.8CVE-2026-106204EPSS 0.4%

    Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

  11. 8.8CVE-2026-106200EPSS 0.4%

    Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  12. 9.6CVE-2026-106197EPSS 0.6%

    Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

  13. 8.8CVE-2026-106193EPSS 0.4%

    Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  14. 8.8CVE-2026-106190EPSS 0.4%

    Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  15. 7.8CVE-2026-57559EPSS 0.07%

    Memory corruption while processing service requests.

  16. 7.8CVE-2026-57555EPSS 0.07%

    Memory Corruption when executing system service routines due to improper handling of user input buffers.

  17. 7.8CVE-2026-57554EPSS 0.07%

    Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

  18. 7.8CVE-2026-57537EPSS 0.07%

    Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

  19. 7.8CVE-2026-25291EPSS 0.07%

    Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

  20. 6.7CVE-2026-25274EPSS 0.07%

    Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

  21. 2.4CVE-2026-105249EPSS 0.1%

    A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/meta/txtp_process.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be la…

  22. 6.7CVE-2026-20542EPSS 0.1%

    In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch…

  23. 6.7CVE-2026-20537EPSS 0.1%

    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I…

  24. 6.7CVE-2026-20536EPSS 0.1%

    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I…

  25. 8.4CVE-2026-20531EPSS 0.1%

    In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; …

  26. 9.6CVE-2026-103630EPSS 0.3%

    Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  27. 8.3CVE-2026-103624EPSS 0.3%

    Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. …

  28. 8.8CVE-2026-103623EPSS 0.3%

    Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  29. 8.8CVE-2026-103622EPSS 0.3%

    Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  30. 7.3CVE-2026-73637EPSS 0.5%

    Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication request…

  31. 9.8CVE-2026-57941EPSS 0.6%

    Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

  32. 9.8CVE-2026-56154EPSS 0.5%

    Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

  33. 6.5CVE-2026-103679EPSS 0.3%

    A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory managem…

  34. 9.2CVE-2026-101276EPSS 0.4%

    iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed ip…

  35. 9.2CVE-2026-19445EPSS 0.5%

    A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else…

  36. 7.0CVE-2026-47598EPSS 0.1%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file clo…

  37. 7.8CVE-2026-47597EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map clean…

  38. 7.8CVE-2026-47594EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to cod…

  39. 7.8CVE-2026-47590EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to cod…

  40. 7.8CVE-2026-47589EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to cod…

  41. 7.8CVE-2026-47588EPSS 0.1%

    NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code executio…

  42. 7.8CVE-2026-47587EPSS 0.1%

    NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, inf…

  43. 6.4CVE-2026-47586EPSS 0.2%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escal…

  44. 7.8CVE-2026-47579EPSS 0.1%

    The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through which a user might trigger a use-after-free condition. Successful exploitation of this issue could lead to code execution, escalation of p…

  45. 7.8CVE-2026-47560EPSS 0.1%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, esca…

  46. 7.8CVE-2026-47551EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escala…

  47. 7.8CVE-2026-47516EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampe…

  48. 7.8CVE-2026-47505EPSS 0.1%

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, or escalati…

  49. 7.8CVE-2026-47500EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerab…

  50. 8.8CVE-2026-74222EPSS 0.3%

    U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR_BUF instead of ERR_A…