Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (7,675)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-62565 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.3 HIGH· v3 N/A· v2 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2025-62563 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62562 1Microsoft 5365 Apps OfficeOffice Long Term Servicing Channel+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2025-62559 1Microsoft 5365 Apps OfficeOffice Long Term Servicing Channel+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62558 1Microsoft 5365 Apps OfficeOffice Long Term Servicing Channel+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62557 1Microsoft 4365 Apps 365 CopilotOffice+1 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62555 1Microsoft 5365 Apps OfficeOffice Long Term Servicing Channel+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62553 1Microsoft 4365 Apps ExcelOffice+1 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62472 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-62221 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-66627 1Wasmi Labs 1Wasmi Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use Afte...Show more Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory growth conditions. This issue potentially leads to memory corruption, information disclosure, or code execution. This issue is fixed in versions 0.41.2, 0.47.1, 0.51.3 and 1.0.1. To workaround this issue, consider limiting the maximum linear memory sizes where feasible.Show less
CVE-2025-14326 1Mozilla 2Firefox Thunderbird Jun 17, 2026 Dec 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
CVE-2025-14321 1Mozilla 2Firefox Thunderbird Jun 17, 2026 Dec 9, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-62408 1C Ares 1C Ares Jun 17, 2026 Dec 8, 2025 N/A· v4 5.9 MEDIUM· v3 N/A· v2 c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed...Show more c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.Show less
CVE-2025-66326 1Huawei 1Harmonyos Jun 17, 2026 Dec 8, 2025 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-65955 1Imagemagick 1Imagemagick Jun 23, 2026 Dec 2, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFam...Show more ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls RelinquishMagickMemory on _drawInfo->font, freeing the font string but leaving _drawInfo->font pointing to freed memory while _drawInfo->family is set to that (now-invalid) pointer. Any later cleanup or reuse of _drawInfo->font re-frees or dereferences dangling memory. DestroyDrawInfo and other setters (Options::font, Image::font) assume _drawInfo->font remains valid, so destruction or subsequent updates trigger crashes or heap corruption. This vulnerability is fixed in 7.1.2-9 and 6.9.13-34.Show less
CVE-2025-13638 1Google 1Chrome Jun 17, 2026 Dec 2, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
CVE-2025-13633 1Google 1Chrome Jun 17, 2026 Dec 2, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium s...Show more Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
CVE-2025-20775 1Google 1Android Jun 17, 2026 Dec 2, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for...Show more In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4795.Show less
CVE-2025-20773 1Google 1Android Jun 17, 2026 Dec 2, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for...Show more In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797.Show less

Previous 1...646566...384 Next