cve.bz

CWE-416: Use After Free, page 75

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2025-54223EPSS 0.3%

    InCopy versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

  2. 5.5CVE-2025-49562EPSS 0.3%

    Animate versions 23.0.12, 24.0.9 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  3. 7.8CVE-2025-49561EPSS 0.3%

    Animate versions 23.0.12, 24.0.9 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi…

  4. 8.4CVE-2025-53784EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  5. 7.8CVE-2025-53761EPSS 0.5%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  6. 8.4CVE-2025-53740EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  7. 7.8CVE-2025-53738EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  8. 7.8CVE-2025-53735EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  9. 7.8CVE-2025-53734EPSS 0.5%

    Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  10. 8.4CVE-2025-53731EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  11. 7.8CVE-2025-53730EPSS 0.5%

    Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  12. 7.0CVE-2025-53721EPSS 0.4%

    Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2025-53718EPSS 0.4%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2025-53152EPSS 0.4%

    Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

  15. 7.8CVE-2025-53151EPSS 0.4%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  16. 7.0CVE-2025-53147EPSS 0.4%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  17. 7.0CVE-2025-53142EPSS 0.4%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2025-53140EPSS 0.4%

    Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

  19. 7.0CVE-2025-53137EPSS 0.4%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2025-53133EPSS 0.4%

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2025-53132EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  22. 8.1CVE-2025-50177EPSS 4.6%

    Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  23. 7.0CVE-2025-50167EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  24. 7.3CVE-2025-50159EPSS 0.6%

    Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2025-50153EPSS 0.4%

    Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2025-49761EPSS 0.4%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  27. 6.7CVE-2025-49743EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  28. 5.5CVE-2025-49568EPSS 0.3%

    Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious f…

  29. 7.8CVE-2025-38500EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation, thus xfrmi_change…

  30. 6.9CVE-2025-55157EPSS 0.4%

    Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference managemen…

  31. 1.9CVE-2025-8842EPSS 0.2%

    A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function do_directive of the file preproc.c. The manipulation leads to use after free. An attack has to be approached locally. The exploit has b…

  32. 1.9CVE-2025-8837EPSS 0.3%

    A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be appr…

  33. 7.8CVE-2025-27128EPSS 0.2%

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

  34. 7.8CVE-2025-24298EPSS 0.2%

    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

  35. 7.5CVE-2025-46709EPSS 0.4%

    Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.

  36. 8.8CVE-2025-8578EPSS 0.3%

    Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  37. 8.8CVE-2025-8576EPSS 0.3%

    Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)

  38. 7.8CVE-2025-21474EPSS 0.09%

    Memory corruption while processing commands from A2dp sink command queue.

  39. 7.8CVE-2025-21458EPSS 0.09%

    Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

  40. 7.8CVE-2025-21456EPSS 0.09%

    Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

  41. 7.5CVE-2025-54635EPSS 0.2%

    Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability.

  42. 4.4CVE-2025-54626EPSS 0.09%

    Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect function stability.

  43. 4.3CVE-2025-0932EPSS 0.3%

    Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operatio…

  44. 7.0CVE-2025-23281EPSS 0.2%

    NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might…

  45. 8.8CVE-2025-8292EPSS 0.4%

    Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  46. 9.8CVE-2025-43222EPSS 0.8%

    A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.

  47. 6.5CVE-2025-43216EPSS 1.1%

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted we…

  48. 7.8CVE-2025-6636EPSS 0.2%

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in …

  49. 7.8CVE-2025-38488EPSS 0.8%

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all c…

  50. 7.8CVE-2025-38485EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush() uses indio_dev->active_scan_mask (with iio_for_each_active_channel()) without…