← Back
CWE-416

8,607 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (8,607)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture.
1Google
1Chrome
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
GoogleSplunk+1 more
4Chrome
Debian LinuxLibxslt+1 more
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Huawei
2Emui
Magic Ui
Jun 17, 2026
Aug 2, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed.
1Linux
1Linux Kernel
Jun 17, 2026
Jul 22, 2021
N/A· v4
7.4 HIGH· v3
6.9 MEDIUM· v2
arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs becaus...Show more
arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun.Show less
1Flowpaper
1Pdf2json
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free .
1Flowpaper
1Pdf2json
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free .
3Debian
LinuxOracle
5Communications Cloud Native Core Binding Support Function
Communications Cloud Native Core Network Exposure FunctionCommunications Cloud Native Core Policy+2 more
Jun 17, 2026
Jul 21, 2021
N/A· v4
6.4 MEDIUM· v3
4.4 MEDIUM· v2
hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
1Openvswitch
1Openvswitch
Jun 17, 2026
Jul 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
4Apple
FedoraprojectLibarchive+1 more
7Fedora
IpadosIphone Os+4 more
Jun 17, 2026
Jul 20, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
1Microsoft
8Windows 10
Windows 7Windows 8.1+5 more
Aug 10, 2026
Jul 14, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Windows GDI Elevation of Privilege Vulnerability
1Google
1Android
Jun 17, 2026
Jul 14, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User int...Show more
In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185259758Show less
1Siemens
2Jt2go
Teamcenter Visualization
Jun 17, 2026
Jul 13, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to...Show more
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13430)Show less
1Siemens
2Jt2go
Teamcenter Visualization
Jun 17, 2026
Jul 13, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to...Show more
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13420)Show less
1Siemens
2Jt2go
Teamcenter Visualization
Jun 17, 2026
Jul 13, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prio...Show more
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13196)Show less