← Back
CWE-416

10,038 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (10,038)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9633
1Adobe
2Flash Player
Flash Player Desktop Runtime
Jun 17, 2026
Jun 12, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use a...Show more
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.Show less
CVE-2020-0233
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi...Show more
In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150225255Show less
CVE-2020-0212
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User inter...Show more
In _onBufferDestroyed of InputBufferManager.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-135140854Show less
CVE-2020-0199
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
4.1 MEDIUM· v3
1.9 LOW· v2
In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User intera...Show more
In TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142142406Show less
CVE-2020-0126
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
6.4 MEDIUM· v3
6.9 MEDIUM· v2
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for ex...Show more
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930Show less
CVE-2020-0113
1Google
1Android
Jun 17, 2026
Jun 10, 2020
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interac...Show more
In sendCaptureResult of Camera3OutputUtils.cpp, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-150944913Show less
CVE-2020-1226
1Microsoft
3365 Apps
ExcelOffice
Jun 17, 2026
Jun 9, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...Show more
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.Show less
CVE-2020-1225
1Microsoft
3365 Apps
ExcelOffice
Jun 17, 2026
Jun 9, 2020
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...Show more
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.Show less
CVE-2020-1207
1Microsoft
8Windows 10
Windows 7Windows 8.1+5 more
Jun 17, 2026
Jun 9, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-...Show more
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1247, CVE-2020-1251, CVE-2020-1253, CVE-2020-1310.Show less
CVE-2020-9795
1Apple
5Ipados
Iphone OsMac Os X+2 more
Jun 17, 2026
Jun 9, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to execute arbitrary c...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2020-13904
3Canonical
DebianFfmpeg
3Debian Linux
FfmpegUbuntu Linux
Jun 17, 2026
Jun 7, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavfo...Show more
FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.Show less
CVE-2020-13871
6Debian
FedoraprojectNetapp+3 more
12Cloud Backup
Communications Messaging ServerCommunications Network Charging And Control+9 more
Oct 14, 2026
Jun 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
CVE-2020-13814
1Foxitsoftware
2Phantompdf
Reader
Jun 17, 2026
Jun 4, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
CVE-2020-13806
1Foxitsoftware
2Phantompdf
Reader
Jun 17, 2026
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.
CVE-2020-6496
3Debian
GoogleOpensuse
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Jun 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6493
3Debian
GoogleOpensuse
4Backports
ChromeDebian Linux+1 more
Jun 17, 2026
Jun 3, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-3618
1Qualcomm
5Ipq6018 Firmware
Ipq8074 FirmwareQca8081 Firmware+2 more
Jun 17, 2026
Jun 2, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130
CVE-2019-14087
1Qualcomm
2Msm8909w Firmware
Qcs605 Firmware
Jun 17, 2026
Jun 2, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605
CVE-2020-13630
9Apple
BroadcomCanonical+6 more
19Cloud Backup
Communications Network Charging And ControlDebian Linux+16 more
Oct 14, 2026
May 27, 2020
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVE-2020-12387
1Mozilla
3Firefox
Firefox EsrThunderbird
Jun 17, 2026
May 26, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunder...Show more
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.Show less