CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,192)
page 275 of 410| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-54103 | Hig | 0.48 | 7.4 | 0.00 | Sep 9, 2025 | Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2025-20006 | Hig | 0.48 | 7.4 | 0.00 | May 13, 2025 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. | ||
| CVE-2025-29792 | Hig | 0.48 | 7.3 | 0.01 | Apr 8, 2025 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-21760 | Hig | 0.48 | 8.1 | 0.37 | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF. | ||
| CVE-2024-41168 | Hig | 0.48 | 7.4 | 0.00 | Feb 12, 2025 | Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access. | ||
| CVE-2024-53165 | Hig | 0.48 | 7.4 | 0.00 | Dec 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this,… | ||
| CVE-2024-43552 | Hig | 0.48 | 7.3 | 0.01 | Oct 8, 2024 | Windows Shell Remote Code Execution Vulnerability | ||
| CVE-2024-30102 | Hig | 0.48 | 7.3 | 0.01 | Jun 11, 2024 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2024-1067 | Hig | 0.48 | 7.4 | 0.00 | May 3, 2024 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain… | ||
| CVE-2024-21409 | Hig | 0.48 | 7.3 | 0.03 | Apr 9, 2024 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2024-21443 | Hig | 0.48 | 7.3 | 0.01 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-20952 | Hig | 0.48 | 7.4 | 0.01 | Jan 16, 2024 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,… | ||
| CVE-2023-36034 | Hig | 0.48 | 7.3 | 0.03 | Nov 3, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2023-36605 | Hig | 0.48 | 7.4 | 0.01 | Oct 10, 2023 | Windows Named Pipe Filesystem Elevation of Privilege Vulnerability | ||
| CVE-2023-36583 | Hig | 0.48 | 7.3 | 0.01 | Oct 10, 2023 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | ||
| CVE-2023-4211 | Med | 0.48 | 5.5 | 0.01 | KEV | Oct 1, 2023 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | |
| CVE-2023-40187 | Hig | 0.48 | 7.3 | 0.01 | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `avc444_ensure_buffer` functions. If the value of… | ||
| CVE-2023-33128 | Hig | 0.48 | 7.3 | 0.01 | Jun 14, 2023 | .NET and Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2019-13768 | Hig | 0.48 | 7.4 | 0.01 | Jan 2, 2023 | Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrome security severity: High) | ||
| CVE-2022-3666 | Hig | 0.48 | 7.3 | 0.01 | Oct 26, 2022 | A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched… |
- risk 0.48cvss 7.4epss 0.00
Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally.
- risk 0.48cvss 7.4epss 0.00
Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- risk 0.48cvss 7.3epss 0.01
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
- risk 0.48cvss 8.1epss 0.37
In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.
- risk 0.48cvss 7.4epss 0.00
Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- risk 0.48cvss 7.4epss 0.00
In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this,…
- risk 0.48cvss 7.3epss 0.01
Windows Shell Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Microsoft Office Remote Code Execution Vulnerability
- risk 0.48cvss 7.4epss 0.00
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain…
- risk 0.48cvss 7.3epss 0.03
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.01
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…
- risk 0.48cvss 7.3epss 0.03
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.48cvss 7.4epss 0.01
Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- risk 0.48cvss 5.5epss 0.01
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
- risk 0.48cvss 7.3epss 0.01
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the `avc420_ensure_buffer` and `avc444_ensure_buffer` functions. If the value of…
- risk 0.48cvss 7.3epss 0.01
.NET and Visual Studio Remote Code Execution Vulnerability
- risk 0.48cvss 7.4epss 0.01
Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrome security severity: High)
- risk 0.48cvss 7.3epss 0.01
A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. The manipulation leads to use after free. The attack may be launched…