cve.bz

CWE-416: Use After Free, page 64

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2025-71159EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs_get_or_create_delayed_node() set the delayed_node's refcount before acquiring t…

  2. 9.8CVE-2026-0794EPSS 0.7%

    ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not …

  3. 7.8CVE-2025-15062EPSS 0.3%

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to explo…

  4. 8.8CVE-2026-0908EPSS 0.3%

    Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

  5. 7.7CVE-2026-23884EPSS 0.5%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trig…

  6. 7.7CVE-2026-23883EPSS 0.5%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `pointer_free` calls `xf_Pointer_Free` and frees it again, triggering ASan UAF. A malicious se…

  7. 2.1CVE-2026-1144EPSS 0.4%

    A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. T…

  8. 1.9CVE-2025-15538EPSS 0.2%

    A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such …

  9. 7.1CVE-2026-21921EPSS 0.4%

    A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privileges to cause a Denial-of-Service (DoS). When telemetry collect…

  10. 7.5CVE-2026-21908EPSS 0.3%

    A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, network-adjacent attacker flapping a port to crash the dot1xd p…

  11. 8.4CVE-2025-13845EPSS 0.4%

    CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.

  12. 6.8CVE-2026-22857EPSS 0.5%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by irp->Complete() and then accessed again on the error path. This vulnerability is …

  13. 6.8CVE-2026-22856EPSS 0.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial->IrpThreads while another reads it…

  14. 6.9CVE-2026-22851EPSS 0.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer…

  15. 9.8CVE-2025-70968EPSS 0.5%

    FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().

  16. 5.5CVE-2025-71131EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_aead_encrypt is called, the underlying request may be freed by an asynchronous completion.…

  17. 7.8CVE-2025-71110EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in defer_free() before accessing freed memory When CONFIG_SLUB_TINY is enabled, kfree_nolock() calls kasan_slab_free() before defer_free(). On A…

  18. 7.8CVE-2026-21287EPSS 0.2%

    Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…

  19. 7.0CVE-2026-21221EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

  20. 7.0CVE-2026-21219EPSS 0.4%

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  21. 8.4CVE-2026-20953EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  22. 8.4CVE-2026-20952EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2026-20950EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2026-20924EPSS 0.3%

    Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-20923EPSS 0.4%

    Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-20920EPSS 0.5%

    Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-20918EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-20877EPSS 0.3%

    Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-20874EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-20873EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-20871EPSS 4.1%

    Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2026-20870EPSS 0.5%

    Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-20867EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-20865EPSS 0.4%

    Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-20861EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-20859EPSS 0.5%

    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-20858EPSS 0.3%

    Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

  38. 7.5CVE-2026-20854EPSS 1.1%

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network.

  39. 7.4CVE-2026-20844EPSS 0.3%

    Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-20842EPSS 0.4%

    Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

  41. 7.0CVE-2026-20830EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-20822EPSS 0.4%

    Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2025-10865EPSS 0.1%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenari…

  44. 8.8CVE-2025-58411EPSS 0.2%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario. Improper resource management and reference coun…

  45. 7.8CVE-2025-71099EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() In xe_oa_add_config_ioctl(), we accessed oa_config->id after dropping metrics_lock. Since this lock protects the…

  46. 7.8CVE-2025-71091EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_override_port_prio_changed() There has been a syzkaller bug reported recently with the following trace: list_del corrupti…

  47. 7.8CVE-2025-71089EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries for kernel address space", v7. This proposes a fix for a security vulnerability related …

  48. 7.8CVE-2025-71082EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_kzalloc in btusb.c file"). In btusb_probe(), we use devm_k…

  49. 7.8CVE-2025-71075EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fails to synchronize with pending tasklets before freeing the asd_ha structure, le…

  50. 7.8CVE-2025-71073EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() schedules lk->tq via schedule_work(), and the work handler lkkbd_reinit() dereferences the lk…