VYPR

CWE-416

Use After Free

VariantStableLikelihood: High

Description

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (8,192)

page 284 of 410
  • CVE-2025-58734HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  • CVE-2025-58733HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  • CVE-2025-58732HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  • CVE-2025-58731HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  • CVE-2025-58730HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

  • CVE-2025-55691HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55690HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55689HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55688HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55686HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55685HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55684HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55678HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

  • CVE-2025-55331HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  • CVE-2025-50174HigOct 14, 2025
    risk 0.46cvss 7.0epss 0.00

    Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

  • CVE-2025-23280HigOct 10, 2025
    risk 0.46cvss 7.0epss 0.00

    NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

  • CVE-2025-47342HigOct 9, 2025
    risk 0.46cvss 7.1epss 0.00

    Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

  • CVE-2023-53638HigOct 7, 2025
    risk 0.46cvss 7.0epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: octeon_ep: cancel queued works in probe error path If it fails to get the devices's MAC address, octep_probe exits while leaving the delayed work intr_poll_task queued. When the work later runs, it's a use…

  • CVE-2023-53572HigOct 4, 2025
    risk 0.46cvss 7.0epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use _safe list iterator to avoid a use after free This loop is freeing "clk" so it needs to use list_for_each_entry_safe(). Otherwise it dereferences a freed variable to get the next item on the…

  • CVE-2025-59220HigSep 18, 2025
    risk 0.46cvss 7.0epss 0.00

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.