Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (9,769)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-21320 1Adobe 1After Effects Aug 28, 2026 Feb 10, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio...Show more After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-21253 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Jun 17, 2026 Feb 10, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.
CVE-2026-21251 1Microsoft 5Windows Server 2016 Windows Server 2019Windows Server 2022+2 more Jun 17, 2026 Feb 10, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally.
CVE-2026-21242 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 23h2+5 more Jun 17, 2026 Feb 10, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-21241 1Microsoft 6Windows 11 23h2 Windows 11 24h2Windows 11 25h2+3 more Jun 17, 2026 Feb 10, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-21237 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 23h2+5 more Jun 17, 2026 Feb 10, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-21235 1Microsoft 9Windows 10 1607 Windows 10 1809Windows 10 21h2+6 more Jun 17, 2026 Feb 10, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-15570 1Ckolivas 1Lrzip Jun 17, 2026 Feb 10, 2026 1.9 LOW· v4 7.8 HIGH· v3 4.3 MEDIUM· v2 A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The ex...Show more A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.Show less
CVE-2026-24684 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after f...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24683 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reini...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24681 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_wr...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24680 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerabilit...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24678 1Freerdp 1Freerdp Jul 15, 2026 Feb 9, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_c...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24677 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 8.7 HIGH· v4 9.1 CRITICAL· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds r...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24676 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 7.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using audin->format, leading to a use after fre...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using audin->format, leading to a use after free in audio_format_compatible. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24675 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 7.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24491 1Freerdp 1Freerdp Jun 17, 2026 Feb 9, 2026 7.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after f...Show more FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0.Show less
CVE-2026-24927 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 6, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-24930 1Huawei 1Harmonyos Jun 17, 2026 Feb 6, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-24917 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 6, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability.

Previous 1...161162163...489 Next