VYPR

CWE-416

Use After Free

VariantStableLikelihood: High

Description

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (8,274)

page 130 of 414
  • CVE-2025-49695HigJul 8, 2025
    risk 0.55cvss 8.4epss 0.01

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2025-47164HigJun 10, 2025
    risk 0.55cvss 8.4epss 0.01

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2025-30386HigMay 13, 2025
    risk 0.55cvss 8.4epss 0.01

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2025-30377HigMay 13, 2025
    risk 0.55cvss 8.4epss 0.01

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2025-0151HigMar 11, 2025
    risk 0.55cvss 8.5epss 0.00

    Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.

  • CVE-2024-40670HigJan 28, 2025
    risk 0.55cvss 8.4epss 0.00

    In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-40669HigJan 28, 2025
    risk 0.55cvss 8.4epss 0.00

    In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-40651HigJan 28, 2025
    risk 0.55cvss 8.4epss 0.00

    In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-40649HigJan 28, 2025
    risk 0.55cvss 8.4epss 0.00

    In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2024-34748HigJan 28, 2025
    risk 0.55cvss 8.4epss 0.00

    In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2025-21362HigJan 14, 2025
    risk 0.55cvss 8.4epss 0.01

    Microsoft Excel Remote Code Execution Vulnerability

  • CVE-2017-18153HigNov 26, 2024
    risk 0.55cvss 8.4epss 0.00

    A race condition exists in a driver potentially leading to a use-after-free condition.

  • CVE-2024-27530HigNov 8, 2024
    risk 0.55cvss 8.4epss 0.00

    wasm3 139076a contains a Use-After-Free in ForEachModule.

  • CVE-2024-38399HigOct 7, 2024
    risk 0.55cvss 8.4epss 0.00

    Memory corruption while processing user packets to generate page faults.

  • CVE-2024-46831HigSep 27, 2024
    risk 0.55cvss 8.4epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear use-after-free error. We remove it, and rely on checking the return code of vcap_del_rule.

  • CVE-2024-33060HigSep 2, 2024
    risk 0.55cvss 8.4epss 0.00

    Memory corruption when two threads try to map and unmap a single node simultaneously.

  • CVE-2024-23365HigSep 2, 2024
    risk 0.55cvss 8.4epss 0.00

    Memory corruption while releasing shared resources in MinkSocket listener thread.

  • CVE-2024-33034HigAug 5, 2024
    risk 0.55cvss 8.4epss 0.00

    Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

  • CVE-2024-33028HigAug 5, 2024
    risk 0.55cvss 8.4epss 0.00

    Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

  • CVE-2024-33023HigAug 5, 2024
    risk 0.55cvss 8.4epss 0.00

    Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.