CWE-416: Use After Free, page 82
Filter
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
What the weakness is: CWE-416 at MITRE
Ask an AI about CWE-416
Show the prompt
Explain CWE-416: Use After Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/416.html and https://cve.bz/cve/cwe/416?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2022-49753EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in dma_chan_get() The first time dma_chan_get() is called for a channel the channel client_count is incorrectly increment…
- 7.8CVE-2025-21887EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d…
- 7.8CVE-2025-21883EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_ena_vfs() fails after calling ice_create_vf_entries(), it frees all VFs without removing them from snapshot PF-VF mailbox…
- 7.8CVE-2025-21879EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning root during em shrinking At btrfs_scan_root() we are accessing the inode's root (and fs_info) in a call to btrfs_fs_clos…
- 7.8CVE-2025-21867EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue in eth_skb_pkt_type()[1]. The cause of the issue was that eth_skb_pkt…
- 7.8CVE-2025-2532EPSS 0.3%
Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit …
- 7.8CVE-2025-0835EPSS 0.2%
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.
- 8.8CVE-2025-2476EPSS 1.0%
Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
- 7.8CVE-2023-52927EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() calling nf_ct_find_expectation() will remove the exp from the hash table. Ho…
- 7.8CVE-2025-24855EPSS 0.4%
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStrin…
- 7.8CVE-2024-55549EPSS 0.4%
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
- 7.8CVE-2025-1432EPSS 0.3%
A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the conte…
- 9.8CVE-2025-25568EPSS 0.6%
SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes this because the use-after-free is not in the VPN software, but is instead in a separate to…
- 5.5CVE-2025-21861EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() If migration succeeded, we called folio_migrate_flags()->mem_cgroup_migrate() to migra…
- 7.8CVE-2025-21858EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in geneve_find_dev() [0] without repro. geneve_configure() links struct geneve_dev.…
- 7.8CVE-2025-21856EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release() in /drivers/base/core.c, a device without a release function is a broken device and must b…
- 7.8CVE-2025-21855EPSS 0.4%
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushing the xmit buffer to VIOS, the tx_bytes stat was incremented by the length of th…
- 7.8CVE-2025-2013EPSS 0.3%
Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required t…
- 7.8CVE-2025-27181EPSS 0.3%
Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that…
- 7.8CVE-2025-27174EPSS 0.4%
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…
- 7.8CVE-2025-27160EPSS 0.4%
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…
- 7.8CVE-2025-27159EPSS 0.4%
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir…
- 8.8CVE-2025-0151EPSS 0.4%
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
- 7.8CVE-2025-26630EPSS 1.0%
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-26629EPSS 0.6%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- 7.0CVE-2025-24983KEVEPSS 1.9%
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24082EPSS 0.7%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-24081EPSS 0.7%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-24080EPSS 0.7%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-24079EPSS 0.7%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- 7.0CVE-2025-24078EPSS 0.6%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-24077EPSS 0.6%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- 7.8CVE-2025-24072EPSS 0.5%
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- 8.1CVE-2025-24064EPSS 1.3%
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-24046EPSS 0.5%
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-24044EPSS 0.6%
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 7.3CVE-2025-23402EPSS 0.2%
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualiza…
- 8.8CVE-2025-2136EPSS 0.3%
Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- 7.8CVE-2024-12837EPSS 0.2%
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.
- 7.8CVE-2024-58083EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is fully online _prior_ to clamping the index in kvm_get_vcpu(). If the…
- 7.8CVE-2024-58072EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update header file") introduced a global list of private data structures. Later on, commit …
- 7.8CVE-2024-58060EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing There is a UAF report in the bpf_struct_ops when CONFIG_MODULES=n. In particula…
- 8.8CVE-2025-1916EPSS 0.3%
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Mediu…
- 7.5CVE-2025-1931EPSS 0.5%
It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird…
- 8.8CVE-2025-1930EPSS 0.4%
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. This vulnerability was fixed in Firefox 136, Firefox ESR 115…
- 7.8CVE-2025-24301EPSS 0.2%
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
- 7.8CVE-2025-23414EPSS 0.2%
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
- 7.8CVE-2025-23409EPSS 0.2%
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
- 7.8CVE-2025-20626EPSS 0.2%
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.
- 7.8CVE-2025-20091EPSS 0.2%
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.