Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CVEs (10,035)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-33574 4Debian FedoraprojectGnu+1 more 13Cloud Backup Debian LinuxE Series Santricity Os Controller+10 more Oct 14, 2026 May 25, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been f...Show more The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.Show less
CVE-2021-29256 1Arm 3Bifrost Gpu Kernel Driver Midgard Gpu Kernel DriverValhall Gpu Kernel Driver Jun 17, 2026 May 24, 2021 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valha...Show more . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.Show less
CVE-2020-36329 5Apple DebianNetapp+2 more 6Debian Linux Enterprise LinuxIpados+3 more Jun 17, 2026 May 21, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as syst...Show more A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less
CVE-2020-23856 2Fedoraproject Gnu 2Cflow Fedora Jun 17, 2026 May 18, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
CVE-2021-3518 6Debian FedoraprojectNetapp+3 more 18Active Iq Unified Manager Clustered Data OntapClustered Data Ontap Antivirus Connector+15 more Oct 14, 2026 May 18, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this fl...Show more There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.Show less
CVE-2021-3483 3Debian LinuxNetapp 11Cloud Backup Debian LinuxH300e Firmware+8 more Aug 5, 2026 May 17, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat fro...Show more A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affectedShow less
CVE-2021-33034 3Debian FedoraprojectLinux 3Debian Linux FedoraLinux Kernel Aug 13, 2026 May 14, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.
CVE-2021-33033 1Linux 1Linux Kernel Aug 5, 2026 May 14, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writin...Show more The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.Show less
CVE-2019-25044 2Linux Netapp 12Cloud Backup H300e FirmwareH300s Firmware+9 more Jun 17, 2026 May 14, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs a...Show more The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs and blk_cleanup_queue.Show less
CVE-2021-32613 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 May 14, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
CVE-2020-14354 2C Ares Fedoraproject 2C Ares Fedora Jun 17, 2026 May 13, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib....Show more A possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is called prior to ares_getaddrinfo() completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability.Show less
CVE-2021-23134 4Debian FedoraprojectLinux+1 more 10Cloud Backup Debian LinuxFedora+7 more Jul 30, 2026 May 12, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with...Show more Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.Show less
CVE-2021-32606 2Fedoraproject Linux 2Fedora Linux Kernel Jun 17, 2026 May 11, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST sup...Show more In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)Show less
CVE-2021-31188 1Microsoft 8Windows 10 Windows 7Windows 8.1+5 more Jun 17, 2026 May 11, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-31177 1Microsoft 6365 Apps ExcelOffice+3 more Jun 17, 2026 May 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31176 1Microsoft 4365 Apps OfficeOffice Online Server+1 more Jun 17, 2026 May 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31175 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 May 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31170 1Microsoft 3Windows 10 Windows Server 2016Windows Server 2019 Jun 17, 2026 May 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-31166 1Microsoft 4Windows 10 2004 Windows 10 20h2Windows Server 2004+1 more Jun 17, 2026 May 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2021-21822 1Foxitsoftware 1Foxit Reader Jun 17, 2026 May 10, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arb...Show more A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a malicious file or site to trigger this vulnerability if the browser plugin extension is enabled.Show less

Previous 1...386387388...502 Next