cve.bz

CWE-416: Use After Free, page 23

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.0CVE-2026-69335EPSS 0.3%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-69333EPSS 0.3%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-69331EPSS 0.3%

    Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-69319EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

  5. 7.1CVE-2026-69314EPSS 0.6%

    Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

  6. 7.0CVE-2026-69311EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  7. 7.0CVE-2026-69310EPSS 0.3%

    Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.

  8. 7.1CVE-2026-69305EPSS 0.6%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

  9. 7.0CVE-2026-69300EPSS 0.3%

    Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-69299EPSS 0.3%

    Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

  11. 7.1CVE-2026-69296EPSS 0.6%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

  12. 7.0CVE-2026-69287EPSS 0.3%

    Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-69281EPSS 0.3%

    Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.

  14. 7.0CVE-2026-69280EPSS 0.3%

    Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  15. 7.0CVE-2026-69279EPSS 0.3%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  16. 7.0CVE-2026-69275EPSS 0.3%

    Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

  17. 7.1CVE-2026-69274EPSS 0.6%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

  18. 7.1CVE-2026-68893EPSS 0.6%

    Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.

  19. 5.5CVE-2026-68886EPSS 0.5%

    Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

  20. 7.0CVE-2026-68847EPSS 0.3%

    Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

  21. 7.1CVE-2026-68846EPSS 0.6%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

  22. 5.5CVE-2026-68843EPSS 0.4%

    Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

  23. 7.0CVE-2026-68840EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-68837EPSS 0.3%

    Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

  25. 7.1CVE-2026-68835EPSS 0.6%

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

  26. 7.0CVE-2026-68825EPSS 0.3%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  27. 7.0CVE-2026-68824EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

  28. 8.8CVE-2026-67385EPSS 0.9%

    Use after free in SQL Server allows an authorized attacker to execute code over a network.

  29. 7.5CVE-2026-62813EPSS 0.7%

    Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.

  30. 7.8CVE-2026-62697EPSS 0.3%

    Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  31. 7.0CVE-2026-62694EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2026-56177EPSS 0.3%

    Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-56172EPSS 0.3%

    Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

  34. 7.0CVE-2026-50349EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  35. 6.0CVE-2026-82063EPSS 0.4%

    A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource …

  36. 7.2CVE-2026-82061EPSS 0.5%

    A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading…

  37. 6.0CVE-2026-82056EPSS 0.3%

    A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be …

  38. 7.8CVE-2026-9034EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operatio…

  39. 7.8CVE-2026-7477EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…

  40. 7.8CVE-2026-7476EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing o…

  41. 7.8CVE-2026-5729EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory. …

  42. 5.1CVE-2026-12387EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…

  43. 4.0CVE-2026-12285EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…

  44. 5.1CVE-2026-11891EPSS 0.2%

    Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to …

  45. 4.4CVE-2026-0001EPSS 0.1%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing oper…

  46. 7.1CVE-2026-86713EPSS 0.4%

    PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performance counter before perf_end() attempts to access it. Attacker…

  47. 4.8CVE-2026-86425EPSS 0.1%

    ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted list of images can trigger memory access after deallocation, resultin…

  48. 4.8CVE-2026-86423EPSS 0.1%

    ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash (denial of s…

  49. 6.8CVE-2026-82325EPSS 0.1%

    A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

  50. 6.7CVE-2026-20517EPSS 0.2%

    In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitati…