← Back
CWE-416

7,455 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (7,455)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-6576
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6573
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
Sep 21, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6559
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6554
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.6 HIGH· v3
6.8 MEDIUM· v2
Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
CVE-2020-6553
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6552
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6551
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6550
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6549
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6545
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6544
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6543
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6542
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6541
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6539
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6532
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Nov 21, 2024
Sep 21, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-9084
1Huawei
1Taurus An00b Firmware
Nov 21, 2024
Sep 18, 2020
N/A· v4
6.5 MEDIUM· v3
4.6 MEDIUM· v2
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitatio...Show more
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.Show less
CVE-2020-0268
1Google
1Android
Nov 21, 2024
Sep 18, 2020
N/A· v4
6.4 MEDIUM· v3
4.4 MEDIUM· v2
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: Andro...Show more
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148294643Show less
CVE-2020-0358
1Google
1Android
Nov 21, 2024
Sep 17, 2020
N/A· v4
6.4 MEDIUM· v3
4.4 MEDIUM· v2
In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Pro...Show more
In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150227563Show less
CVE-2020-0357
1Google
1Android
Nov 21, 2024
Sep 17, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is n...Show more
In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150225569Show less