Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,657)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-28073 1Radare 1Radare2 Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
CVE-2022-28071 1Radare 1Radare2 Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
CVE-2021-33390 1Dpic Project 1Dpic Jun 17, 2026 Aug 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.
CVE-2021-32421 1Dpic Project 1Dpic Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
CVE-2020-27418 1Fedoraproject 1Fedora Linux Kernel Jul 9, 2026 Aug 22, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.
CVE-2020-21896 1Artifex 1Mupdf Jun 17, 2026 Aug 22, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF fi...Show more A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file.Show less
CVE-2020-21722 1Ogg Video Tools Project 1Ogg Video Tools Jun 17, 2026 Aug 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVE-2020-19725 1Microsoft 1Z3 Jun 17, 2026 Aug 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults o...Show more There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.Show less
CVE-2020-18780 1Nasm 1Netwide Assembler Jun 17, 2026 Aug 22, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.
CVE-2023-36787 1Microsoft 1Edge Chromium Aug 10, 2026 Aug 21, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-4394 1Linux 1Linux Kernel Jun 17, 2026 Aug 17, 2023 N/A· v4 6.0 MEDIUM· v3 N/A· v2 A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak in...Show more A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel informationShow less
CVE-2023-4387 2Linux Redhat 2Enterprise Linux Linux Kernel Jun 17, 2026 Aug 16, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due...Show more A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.Show less
CVE-2023-4366 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium sec...Show more Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4358 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4356 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chr...Show more Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4351 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:...Show more Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
CVE-2023-4349 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-2312 1Google 1Chrome Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium se...Show more Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
CVE-2023-28198 3Apple WebkitgtkWpewebkit 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Aug 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.
CVE-2023-30186 1Onlyoffice 1Document Server Jul 9, 2026 Aug 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

Previous 1...240241242...433 Next