cve.bz

CWE-416: Use After Free, page 8

Filter

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

What the weakness is: CWE-416 at MITRE

Ask an AI about CWE-416

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.0CVE-2026-85914EPSS 0.2%

    Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-85911EPSS 0.4%

    Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-85906EPSS 0.3%

    Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2026-85874EPSS 0.4%

    Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.

  5. 7.8CVE-2026-85872EPSS 0.3%

    Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

  6. 7.0CVE-2026-85868EPSS 0.3%

    Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  7. 7.8CVE-2026-85863EPSS 0.2%

    Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-85861EPSS 0.2%

    Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-85860EPSS 0.2%

    Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-85855EPSS 0.3%

    Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-85854EPSS 0.2%

    Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-85851EPSS 0.3%

    Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-85846EPSS 0.2%

    Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

  14. 6.6CVE-2026-85841EPSS 0.6%

    Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

  15. 7.8CVE-2026-85836EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-85833EPSS 0.3%

    Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

  17. 7.0CVE-2026-85824EPSS 0.2%

    Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2026-85823EPSS 0.2%

    Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

  19. 7.5CVE-2026-85811EPSS 0.4%

    Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

  20. 7.0CVE-2026-85810EPSS 0.2%

    Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-85804EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-85803EPSS 0.2%

    Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-85802EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  24. 8.1CVE-2026-85799EPSS 0.7%

    Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

  25. 7.8CVE-2026-85795EPSS 0.3%

    Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

  26. 9.8CVE-2026-85792EPSS 0.9%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  27. 5.9CVE-2026-85790EPSS 0.8%

    Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

  28. 7.8CVE-2026-85375EPSS 0.3%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-85372EPSS 0.2%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  30. 8.1CVE-2026-85371EPSS 0.7%

    Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

  31. 7.0CVE-2026-85370EPSS 0.3%

    Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

  32. 7.0CVE-2026-85367EPSS 0.2%

    Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

  33. 7.0CVE-2026-85364EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  34. 7.0CVE-2026-85361EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-85357EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

  36. 7.0CVE-2026-85354EPSS 0.2%

    Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  37. 7.0CVE-2026-85352EPSS 0.2%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  38. 7.0CVE-2026-85342EPSS 0.2%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-85340EPSS 0.4%

    Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-85332EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  41. 7.0CVE-2026-85329EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.

  42. 7.0CVE-2026-84020EPSS 0.2%

    Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  43. 7.0CVE-2026-84019EPSS 0.2%

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-84018EPSS 0.2%

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-84013EPSS 0.3%

    Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-83930EPSS 0.3%

    Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2026-83924EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-83922EPSS 0.3%

    Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  49. 7.0CVE-2026-83917EPSS 0.3%

    Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

  50. 7.0CVE-2026-83915EPSS 0.3%

    Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.