← Back
CWE-416

8,652 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (8,652)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-35824
2Debian
Linux
2Debian Linux
Linux Kernel
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.
CVE-2023-35823
2Debian
Linux
2Debian Linux
Linux Kernel
Aug 26, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
CVE-2023-28287
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jun 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft Publisher Remote Code Execution Vulnerability
CVE-2023-35784
1Openbsd
2Libressl
Openbsd
Jun 17, 2026
Jun 16, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
CVE-2023-34475
2Fedoraproject
Imagemagick
3Extra Packages For Enterprise Linux
FedoraImagemagick
Jun 17, 2026
Jun 16, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free...Show more
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.Show less
CVE-2023-34795
1Xlsxio Project
1Xlsxio
Jun 17, 2026
Jun 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX f...Show more
xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX file.Show less
CVE-2023-29356
1Microsoft
2Odbc Driver For Sql Server
Sql Server
Jun 17, 2026
Jun 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-29321
1Adobe
1Animate
Jun 17, 2026
Jun 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...Show more
Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21120
1Google
1Android
Jun 17, 2026
Jun 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...Show more
In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258188673Show less
CVE-2023-21108
1Google
1Android
Jun 17, 2026
Jun 15, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional executio...Show more
In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-239414876Show less
CVE-2023-21101
1Google
1Android
Jun 17, 2026
Jun 15, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...Show more
In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258189255Show less
CVE-2023-33128
1Microsoft
2.net
Visual Studio 2022
Jun 17, 2026
Jun 14, 2023
N/A· v4
7.3 HIGH· v3
N/A· v2
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-32018
1Microsoft
1Windows 11 22h2
Jun 17, 2026
Jun 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Hello Remote Code Execution Vulnerability
CVE-2023-29365
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Jun 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Media Remote Code Execution Vulnerability
CVE-2023-29361
1Microsoft
5Windows 10 21h2
Windows 10 22h2Windows 11 21h2+2 more
Jun 17, 2026
Jun 14, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-29358
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Jun 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-3217
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Jun 13, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-3215
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Jun 13, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-3214
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Jun 13, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-3159
1Linux
1Linux Kernel
Jun 17, 2026
Jun 12, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fai...Show more
A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.Show less