← Back
CWE-416

8,657 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (8,657)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
10Windows 10 1507
Windows 10 1607Windows 10 1809+7 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Remote Procedure Call Runtime Remote Code Execution Vulnerability
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
Jul 11, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft Outlook Remote Code Execution Vulnerability
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
Jul 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft Office Graphics Remote Code Execution Vulnerability
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Active Template Library Elevation of Privilege Vulnerability
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft ODBC Driver Remote Code Execution Vulnerability
1Microsoft
5Windows Server 2008
Windows Server 2012Windows Server 2016+2 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
Microsoft Failover Cluster Remote Code Execution Vulnerability
1Microsoft
11Windows 10 1507
Windows 10 1607Windows 10 1809+8 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Win32k Elevation of Privilege Vulnerability
3Fedoraproject
LinuxRedhat
3Enterprise Linux
FedoraLinux Kernel
Jun 17, 2026
Jul 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be...Show more
A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.Show less
1Zephyrproject
1Zephyr
Jun 17, 2026
Jul 10, 2023
N/A· v4
8.0 HIGH· v3
N/A· v2
The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, lead...Show more
The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer.Show less
1Radare
1Radare2
Jun 17, 2026
Jul 7, 2023
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
1Artifex
1Mujs
Jun 17, 2026
Jul 7, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
1Scipy
1Scipy
Jun 17, 2026
Jul 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
1Linux
1Linux Kernel
Jun 17, 2026
Jul 6, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com re...Show more
An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this.Show less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Jul 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Jul 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Jul 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.
4Canonical
DebianFedoraproject+1 more
4Debian Linux
FedoraLinux Kernel+1 more
Jun 17, 2026
Jul 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
1Mozilla
1Firefox
Jun 17, 2026
Jul 5, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the...Show more
A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox < 115.Show less
2Debian
Mozilla
4Debian Linux
FirefoxFirefox Esr+1 more
Jun 17, 2026
Jul 5, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox...Show more
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.Show less