Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,588)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-52757 1Nsa 1Ghidra Jul 14, 2026 Jun 10, 2026 4.6 MEDIUM· v4 4.4 MEDIUM· v3 N/A· v2 Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that caus...Show more Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced, reading and writing the flags field of freed heap memory when a user opens the binary in Ghidra's decompiler view.Show less
CVE-2026-49496 1Nsa 1Ghidra Jul 14, 2026 Jun 10, 2026 6.9 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trig...Show more Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public Sleigh::oneInstruction C++ API, affecting downstream SLEIGH library consumers.Show less
CVE-2026-45782 - - Jun 17, 2026 Jun 10, 2026 8.9 HIGH· v4 N/A· v3 N/A· v2 Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can cause a use-after-free in the cloud-hypervisor process by submitting two virtio-block descriptor ch...Show more Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can cause a use-after-free in the cloud-hypervisor process by submitting two virtio-block descriptor chains that reuse the same head_index while asynchronous block I/O is enabled (e.g. io_uring, aio). When the kernel completes the duplicate operation before the original, the completion path frees a bounce buffer that the kernel is still actively reading from or writing to, corrupting the freed memory. This issue has been patched in versions 51.2 and 52.0.Show less
CVE-2026-47955 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47924 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose s...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47921 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47920 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47919 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47918 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47917 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47916 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47915 1Adobe 3Acrobat Acrobat DcAcrobat Reader Dc Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47914 1Adobe 2Acrobat Acrobat Reader Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47913 1Adobe 2Acrobat Acrobat Reader Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-47912 1Adobe 2Acrobat Acrobat Reader Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-34696 1Adobe 1Indesign Aug 28, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...Show more InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-48583 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Jun 9, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-48563 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Jul 9, 2026 Jun 9, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47654 1Microsoft 4Windows Server 2016 Windows Server 2019Windows Server 2022+1 more Jul 9, 2026 Jun 9, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-47653 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Jul 9, 2026 Jun 9, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Previous 1...565758...430 Next