Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,602)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-26900 1Microsoft 2Windows 10 Windows Server 2016 Aug 19, 2026 Mar 11, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-26411 1Microsoft 2Edge Internet Explorer Aug 19, 2026 Mar 11, 2021 N/A· v4 8.8 HIGH· v3 5.1 MEDIUM· v2 Internet Explorer Memory Corruption Vulnerability
CVE-2020-1900 1Facebook 1Hhvm Jun 17, 2026 Mar 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stor...Show more When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.Show less
CVE-2021-21772 33mf DebianFedoraproject 3Debian Linux FedoraLib3mf Jun 17, 2026 Mar 10, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious...Show more A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-0399 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne...Show more In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernelShow less
CVE-2021-0395 1Google 1Android Jun 17, 2026 Mar 10, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio...Show more In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170315126Show less
CVE-2021-21188 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Mar 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21180 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Mar 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21179 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Mar 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21167 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Mar 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21162 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Mar 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21159 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Mar 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-3403 3Fedoraproject RedhatYtnef Project 3Enterprise Linux FedoraYtnef Jun 17, 2026 Mar 4, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
CVE-2020-13558 1Webkitgtk 1Webkitgtk Jun 17, 2026 Mar 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.
CVE-2021-22662 1Fatek 1Fvdesigner Jun 17, 2026 Mar 3, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary c...Show more A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.Show less
CVE-2020-25632 4Fedoraproject GnuNetapp+1 more 8Enterprise Linux Enterprise Linux Server AusEnterprise Linux Server Eus+5 more Jun 17, 2026 Mar 3, 2021 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-fr...Show more A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less
CVE-2021-24070 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Feb 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-24067 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Feb 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-20226 2Linux Netapp 2Cloud Backup Linux Kernel Jun 17, 2026 Feb 23, 2021 N/A· v4 7.8 HIGH· v3 6.1 MEDIUM· v2 A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existe...Show more A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not incrementing the file reference counter while in use. The highest threat from this vulnerability is to data integrity, confidentiality and system availability.Show less
CVE-2021-21157 3Fedoraproject GoogleMicrosoft 4Chrome EdgeEdge Chromium+1 more Jun 17, 2026 Feb 22, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Previous 1...319320321...431 Next