Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (8,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-6463 5Canonical DebianFedoraproject+2 more 6Backports Sle ChromeDebian Linux+3 more Jun 17, 2026 May 21, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6462 2Debian Google 2Chrome Debian Linux Jun 17, 2026 May 21, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6461 2Debian Google 2Chrome Debian Linux Jun 17, 2026 May 21, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6459 2Debian Google 2Chrome Debian Linux Jun 17, 2026 May 21, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6457 2Debian Google 2Chrome Debian Linux Jun 17, 2026 May 21, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-1897 1Facebook 1Proxygen Jun 17, 2026 May 18, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v...Show more A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.Show less
CVE-2020-6074 1Gonitro 1Nitro Pro Jun 17, 2026 May 18, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which can lead to remote code execution. An attacker can provide a...Show more An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2020-10958 1Dovecot 1Dovecot Jun 17, 2026 May 18, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a...Show more In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.Show less
CVE-2018-10756 3Debian FedoraprojectTransmissionbt 3Debian Linux FedoraTransmission Nov 21, 2024 May 15, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
CVE-2019-15878 1Freebsd 1Freebsd Jun 17, 2026 May 13, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situation due to improper checking in SCTP when an application tries...Show more In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situation due to improper checking in SCTP when an application tries to update an SCTP-AUTH shared key.Show less
CVE-2020-5897 1F5 2Big Ip Access Policy Manager Big Ip Access Policy Manager Client Jun 17, 2026 May 12, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component.
CVE-2019-19162 1Tobesoft 1Xplatform Jun 17, 2026 May 11, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it.
CVE-2020-11866 3Fedoraproject Libemf ProjectOpensuse 3Fedora LeapLibemf Jun 17, 2026 May 11, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
CVE-2019-20795 2Canonical Iproute2 Project 2Iproute2 Ubuntu Linux Jun 17, 2026 May 9, 2020 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option of...Show more iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.Show less
CVE-2020-10690 6Canonical DebianLinux+3 more 22Active Iq Unified Manager Debian LinuxElement Software+19 more Jun 17, 2026 May 8, 2020 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /d...Show more There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.Show less
CVE-2020-12657 1Linux 1Linux Kernel Jun 17, 2026 May 5, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body.
CVE-2020-10700 3Fedoraproject OpensuseSamba 3Fedora LeapSamba Jun 17, 2026 May 4, 2020 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This...Show more A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.Show less
CVE-2020-1752 4Canonical DebianGnu+1 more 8Active Iq Unified Manager Debian LinuxGlibc+5 more Jun 17, 2026 Apr 30, 2020 N/A· v4 7.0 HIGH· v3 3.7 LOW· v2 A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by...Show more A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.Show less
CVE-2020-12464 2Linux Netapp 10Active Iq Unified Manager Aff A700sCloud Backup+7 more Jun 17, 2026 Apr 29, 2020 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVE-2019-15874 2Freebsd Netapp 2Clustered Data Ontap Freebsd Jun 17, 2026 Apr 29, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory access after it has...Show more In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory access after it has been freed leading to a kernel panic or other unpredictable results.Show less

Previous 1...335336337...430 Next