Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,592)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-35418 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-35416 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-34638 1Adobe 1Premiere Pro Aug 28, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-34347 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34345 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-34340 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-34338 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-34337 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-34333 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34332 1Microsoft 1Windows Server 2025 Jun 17, 2026 May 12, 2026 N/A· v4 8.0 HIGH· v3 N/A· v2 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.
CVE-2026-34331 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34330 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-33840 1Microsoft 4Windows 11 24h2 Windows 11 25h2Windows 11 26h1+1 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-33835 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-32161 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.
CVE-2025-27723 - - Jun 17, 2026 May 12, 2026 6.8 MEDIUM· v4 N/A· v3 N/A· v2 Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combi...Show more Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.Show less
CVE-2026-8390 1Mozilla 1Firefox Jul 15, 2026 May 12, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3.
CVE-2026-43668 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 May 11, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5,...Show more A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.Show less
CVE-2026-28994 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 May 11, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5,...Show more A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets.Show less
CVE-2026-28969 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 May 11, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5,...Show more A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.Show less

Previous 1...787980...430 Next