Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,588)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-8201 1Mongodb 1Mongodb Jun 17, 2026 May 13, 2026 6.1 MEDIUM· v4 8.8 HIGH· v3 N/A· v2 A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over th...Show more A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client's FLE-related query. This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.Show less
CVE-2026-45185 1Exim 1Exim Jun 17, 2026 May 12, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, fol...Show more Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.Show less
CVE-2026-42825 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-41095 1Microsoft 6Windows Server 2012 Windows Server 2016Windows Server 2019+3 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.
CVE-2026-40419 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40415 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 May 12, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-40410 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-40408 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-40406 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
CVE-2026-40402 1Microsoft 2Windows 11 23h2 Windows Server 2022 Jun 17, 2026 May 12, 2026 N/A· v4 9.3 CRITICAL· v3 N/A· v2 Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
CVE-2026-40382 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-40366 1Microsoft 4365 Apps OfficeOffice Long Term Servicing Channel+1 more Jun 17, 2026 May 12, 2026 N/A· v4 8.4 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40361 1Microsoft 4365 Apps OfficeOffice Long Term Servicing Channel+1 more Jun 17, 2026 May 12, 2026 N/A· v4 8.4 HIGH· v3 N/A· v2 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40359 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40358 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 May 12, 2026 N/A· v4 8.4 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-35418 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-35416 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-34638 1Adobe 1Premiere Pro Aug 28, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-34347 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Previous 1...777879...430 Next