Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (9,595)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-69311 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69310 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-69305 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-69300 1Microsoft 6Windows 11 23h2 Windows 11 24h2Windows 11 25h2+3 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69299 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 23h2+5 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69296 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69287 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69281 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69280 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69279 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69275 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 30, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69274 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-68893 1Microsoft 7Windows 10 1607 Windows 10 1809Windows Server 2012+4 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-68886 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Sep 17, 2026 Sep 8, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
CVE-2026-68847 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 23h2+5 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-68846 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVE-2026-68843 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 29, 2026 Sep 8, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-68840 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68837 1Microsoft 10Windows 10 1607 Windows 10 1809Windows 10 21h2+7 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68835 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Previous 1...535455...480 Next