cve.bz

CWE-416: Use After Free, page 52

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-8544EPSS 0.3%

    Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  2. 8.3CVE-2026-8542EPSS 0.2%

    Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Hig…

  3. 8.3CVE-2026-8533EPSS 0.2%

    Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  4. 8.3CVE-2026-8530EPSS 0.3%

    Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: …

  5. 8.3CVE-2026-8523EPSS 0.2%

    Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  6. 8.8CVE-2026-8522EPSS 0.3%

    Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

  7. 7.5CVE-2026-8521EPSS 0.2%

    Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

  8. 8.8CVE-2026-8518EPSS 0.3%

    Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

  9. 8.3CVE-2026-8515EPSS 0.2%

    Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: C…

  10. 8.3CVE-2026-8514EPSS 0.2%

    Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

  11. 8.3CVE-2026-8513EPSS 0.2%

    Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Cr…

  12. 8.3CVE-2026-8512EPSS 0.3%

    Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security seve…

  13. 9.6CVE-2026-8511EPSS 0.2%

    Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

  14. 8.7CVE-2026-41218EPSS 0.3%

    When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::, CLASSIFY::, PEM::, PSC::, and the urlcatquery command), undisclosed traffic can cause the Traffic Management Microkernel (TMM)…

  15. 6.3CVE-2026-40701EPSS 0.7%

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with…

  16. 7.7CVE-2026-8336EPSS 0.3%

    After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine (through $wh…

  17. 6.1CVE-2026-8201EPSS 0.1%

    A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a cl…

  18. 9.8CVE-2026-45185EPSS 1.3%

    Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cl…

  19. 7.0CVE-2026-42825EPSS 0.2%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-41095EPSS 0.3%

    Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-40419EPSS 0.3%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-40418EPSS 0.3%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  23. 8.1CVE-2026-40415EPSS 0.8%

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  24. 7.0CVE-2026-40410EPSS 0.2%

    Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-40408EPSS 0.3%

    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  26. 7.5CVE-2026-40406EPSS 0.9%

    Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

  27. 9.3CVE-2026-40402EPSS 0.3%

    Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-40382EPSS 0.2%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  29. 8.4CVE-2026-40366EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  30. 8.4CVE-2026-40361EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2026-40359EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  32. 8.4CVE-2026-40358EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  33. 7.0CVE-2026-35418EPSS 0.2%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  34. 7.0CVE-2026-35416EPSS 1.6%

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-34638EPSS 0.2%

    Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that …

  36. 7.0CVE-2026-34347EPSS 0.3%

    Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  37. 7.0CVE-2026-34345EPSS 0.2%

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  38. 7.0CVE-2026-34340EPSS 0.2%

    Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-34338EPSS 0.2%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-34337EPSS 0.2%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-34333EPSS 0.3%

    Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  42. 8.0CVE-2026-34332EPSS 0.5%

    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

  43. 7.0CVE-2026-34331EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  44. 7.8CVE-2026-34330EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-33840EPSS 2.0%

    Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-33835EPSS 2.1%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  47. 7.5CVE-2026-32161EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

  48. 6.8CVE-2025-27723EPSS 0.1%

    Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low comp…

  49. 7.3CVE-2026-8390EPSS 0.5%

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3.

  50. 7.5CVE-2026-43668EPSS 1.1%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, wat…