← Back
CWE-416

8,662 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (8,662)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chro...Show more
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Microsoft
1365 Apps
Jun 17, 2026
Jun 11, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Microsoft Office Remote Code Execution Vulnerability
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jul 20, 2026
Jun 11, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Microsoft Office Remote Code Execution Vulnerability
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jul 20, 2026
Jun 11, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft Streaming Service Elevation of Privilege Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jul 20, 2026
Jun 11, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jul 20, 2026
Jun 11, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Win32k Elevation of Privilege Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jul 20, 2026
Jun 11, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
1Microsoft
4Windows Server 2012
Windows Server 2016Windows Server 2019+1 more
Jul 20, 2026
Jun 11, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Jun 11, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.
1Mozilla
1Firefox
Jun 17, 2026
Jun 11, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.
1Mozilla
2Firefox
Thunderbird
Jun 17, 2026
Jun 11, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
2Debian
Linux
2Debian Linux
Linux Kernel
Jun 17, 2026
Jun 10, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possibl...Show more
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call dst_release(old_dst). Note that sk_dst_reset(sk) is implementing this protocol correctly, while __dst_negative_advice() uses the wrong order. Given that ip6_negative_advice() has special logic against RTF_CACHE, this means each of the three ->negative_advice() existing methods must perform the sk_dst_reset() themselves. Note the check against NULL dst is centralized in __dst_negative_advice(), there is no need to duplicate it in various callbacks. Many thanks to Clement Lecigne for tracking this issue. This old bug became visible after the blamed commit, using UDP sockets.Show less
1Samsung
8Exynos 1080 Firmware
Exynos 1280 FirmwareExynos 1330 Firmware+5 more
Jun 17, 2026
Jun 7, 2024
N/A· v4
8.4 HIGH· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper referenc...Show more
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper reference count checking, which can result in a UAF (Use-After-Free) vulnerability.Show less
1Samsung
8Exynos 1080 Firmware
Exynos 1280 FirmwareExynos 1330 Firmware+5 more
Jun 17, 2026
Jun 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory d...Show more
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory deallocation checking, which can result in a UAF (Use-After-Free) vulnerability.Show less
1Arm
2Bifrost Gpu Kernel Driver
Valhall Gpu Kernel Driver
Jun 17, 2026
Jun 7, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed me...Show more
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0.Show less