Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (9,595)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-68825 1Microsoft 5Windows 11 23h2 Windows 11 24h2Windows 11 25h2+2 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68824 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 23h2+5 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-67385 1Microsoft 4Sql Server 2017 Sql Server 2019Sql Server 2022+1 more Sep 16, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-62813 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 30, 2026 Sep 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-62697 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 23h2+5 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-62694 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-56177 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-56172 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Sep 17, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-50349 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 24, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-82063 1Mongodb 1Mongodb Sep 16, 2026 Sep 8, 2026 6.0 MEDIUM· v4 5.3 MEDIUM· v3 N/A· v2 A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer t...Show more A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.Show less
CVE-2026-82061 1Mongodb 1Mongodb Sep 16, 2026 Sep 8, 2026 7.2 HIGH· v4 8.1 HIGH· v3 N/A· v2 A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard databas...Show more A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. No user interaction is required.Show less
CVE-2026-82056 1Mongodb 1Mongodb Sep 16, 2026 Sep 8, 2026 6.0 MEDIUM· v4 5.3 MEDIUM· v3 N/A· v2 A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text ind...Show more A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been freed, leading to a server crash. An authenticated user with readWrite privileges can trigger this condition through specific concurrent text-search and index management operations, resulting in denial of service for all connected clients. ThisShow less
CVE-2026-9034 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU...Show more Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Bifrost GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p3; Valhall GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0.Show less
CVE-2026-7477 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU mem...Show more Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r44p0 through r49p4, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3, r55p0.Show less
CVE-2026-7476 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU...Show more Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r49p3 through r49p5, r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r49p3 through r49p5, from r51p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r49p3 through r49p5, from r51p0 through r54p3, r55p0.Show less
CVE-2026-5729 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access alread...Show more Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory. This issue affects Valhall GPU Kernel Driver: from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r50p0 through r54p3, r55p0.Show less
CVE-2026-12387 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 5.1 MEDIUM· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU mem...Show more Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.Show less
CVE-2026-12285 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 4.0 MEDIUM· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU mem...Show more Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.Show less
CVE-2026-11891 - - Sep 10, 2026 Sep 8, 2026 N/A· v4 5.1 MEDIUM· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via W...Show more Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0.Show less
CVE-2026-0001 - - Sep 8, 2026 Sep 8, 2026 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU mem...Show more Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.Show less

Previous 1...545556...480 Next