Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,657)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-41773 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41771 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41770 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41769 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41768 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41767 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41765 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-38166 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-36902 1Microsoft 9Windows 10 1607 Windows 10 1809Windows 10 21h2+6 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Runtime Remote Code Execution Vulnerability
CVE-2023-36776 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Win32k Elevation of Privilege Vulnerability
CVE-2023-36743 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Win32k Elevation of Privilege Vulnerability
CVE-2023-36726 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability
CVE-2023-36605 1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
CVE-2023-36583 1Microsoft 12Windows 10 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.3 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36565 1Microsoft 3365 Copilot OfficeOffice Long Term Servicing Channel Jun 17, 2026 Oct 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Microsoft Office Graphics Elevation of Privilege Vulnerability
CVE-2023-41675 1Fortinet 2Fortios Fortiproxy Jun 17, 2026 Oct 10, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated rem...Show more A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.Show less
CVE-2023-40632 1Google 1Android Jun 17, 2026 Oct 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed
CVE-2023-45322 1Xmlsoft 1Libxml2 Jun 17, 2026 Oct 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical eno...Show more libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."Show less
CVE-2023-39928 3Debian FedoraprojectWebkitgtk 3Debian Linux FedoraWebkitgtk Jun 17, 2026 Oct 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A...Show more A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.Show less
CVE-2023-38703 1Teluu 1Pjsip Jun 17, 2026 Oct 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level medi...Show more PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not synchronized with its lower level transport that may introduce use-after-free issue. This vulnerability affects applications that have SRTP capability (`PJMEDIA_HAS_SRTP` is set) and use underlying media transport other than UDP. This vulnerability’s impact may range from unexpected application termination to control flow hijack/memory corruption. The patch is available as a commit in the master branch.Show less

Previous 1...235236237...433 Next