Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,657)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4763 2Debian Google 2Chrome Debian Linux Jun 17, 2026 Sep 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-33021 1Qualcomm 163Apq8064au Firmware Aqt1000 FirmwareAr8035 Firmware+160 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Graphics while processing user packets for command submission.
CVE-2023-4755 1Gpac 1Gpac Jun 17, 2026 Sep 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.
CVE-2023-4752 5Apple DebianFedoraproject+2 more 5Debian Linux FedoraMacos+2 more Sep 17, 2026 Sep 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.1858.
CVE-2023-4750 4Apple FedoraprojectNeovim+1 more 4Fedora MacosNeovim+1 more Sep 17, 2026 Sep 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.1857.
CVE-2023-4733 3Apple FedoraprojectVim 3Fedora MacosVim Jun 23, 2026 Sep 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.1840.
CVE-2023-20849 4Google LinuxLinuxfoundation+1 more 4Android Iot YoctoLinux Kernel+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitat...Show more In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350.Show less
CVE-2023-20835 3Google LinuxfoundationMediatek 3Android Iot YoctoYocto Jun 17, 2026 Sep 4, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07326570.Show less
CVE-2023-20834 1Google 1Android Jun 17, 2026 Sep 4, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID: ALPS07608514.Show less
CVE-2023-3297 1Canonical 2Accountsservice Ubuntu Linux Jun 17, 2026 Sep 1, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
CVE-2023-40187 1Freerdp 1Freerdp Jun 17, 2026 Aug 31, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `...Show more FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `avc444_ensure_buffer` functions. If the value of `piDstSize[x]` is 0, `ppYUVDstData[x]` will be freed. However, in this case `ppYUVDstData[x]` will not have been updated which leads to a Use-After-Free vulnerability. This issue has been addressed in version 3.0.0-beta3. Users of the 3.x beta releases are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-39355 2Debian Freerdp 2Debian Linux Freerdp Jun 17, 2026 Aug 31, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_C...Show more FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_CMDID_RESETGRAPHICS` packets. If `context->maxPlaneSize` is 0, `context->planesBuffer` will be freed. However, without updating `context->planesBuffer`, this leads to a Use-After-Free exploit vector. In most environments this should only result in a crash. This issue has been addressed in version 3.0.0-beta3 and users of the beta 3.x releases are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-4611 1Linux 1Linux Kernel Sep 11, 2026 Aug 29, 2023 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash...Show more A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.Show less
CVE-2023-4572 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-39562 1Gpac 1Gpac Jun 17, 2026 Aug 28, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a c...Show more GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.Show less
CVE-2023-36741 1Microsoft 1Edge Chromium Aug 10, 2026 Aug 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-46884 1Mozilla 1Firefox Jun 17, 2026 Aug 24, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. Note: This advis...Show more A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. Note: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.Show less
CVE-2023-4430 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4429 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-48560 2Debian Python 2Debian Linux Python Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A use-after-free exists in Python through 3.9 via heappushpop in heapq.

Previous 1...239240241...433 Next