CWE-416
Use After Free
Description
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (8,173)
page 377 of 409| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-49173 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-49171 | Hig | 0.00 | 7.5 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-49169 | Hig | 0.00 | 8.0 | 0.01 | Jul 14, 2026 | Use after free in DNS Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-49167 | Med | 0.00 | 4.7 | 0.00 | Jul 14, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-49166 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-49162 | Hig | 0.00 | 7.0 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-48572 | Hig | 0.00 | 7.0 | 0.00 | Jul 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-48571 | Hig | 0.00 | 7.0 | 0.00 | Jul 14, 2026 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-44800 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-42900 | Hig | 0.00 | 8.1 | 0.00 | Jul 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-40467 | Hig | 0.00 | 7.5 | 0.00 | Jul 13, 2026 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. | ||
| CVE-2026-15194 | Low | 0.00 | 3.3 | 0.00 | Jul 9, 2026 | A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit has been released… | ||
| CVE-2026-57256 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their… | ||
| CVE-2026-57252 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel to continue accessing invalid pointers, eventually leading to the application crashing. | ||
| CVE-2026-57250 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing. | ||
| CVE-2026-57249 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed. | ||
| CVE-2026-57247 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggering an illegal read and crashing. | ||
| CVE-2026-57245 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinations. This results in the internal objects entering an invalid state. Eventually, during the… | ||
| CVE-2026-57244 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the… | ||
| CVE-2026-57242 | Hig | 0.00 | 7.8 | 0.00 | Jul 8, 2026 | The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a… |
- risk 0.00cvss 7.8epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.5epss 0.00
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 8.0epss 0.01
Use after free in DNS Server allows an authorized attacker to execute code over a network.
- risk 0.00cvss 4.7epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.0epss 0.00
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.0epss 0.00
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.8epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 8.1epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.
- risk 0.00cvss 7.5epss 0.00
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
- risk 0.00cvss 3.3epss 0.00
A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit has been released…
- risk 0.00cvss 7.8epss 0.00
When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their…
- risk 0.00cvss 7.8epss 0.00
When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel to continue accessing invalid pointers, eventually leading to the application crashing.
- risk 0.00cvss 7.8epss 0.00
When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.
- risk 0.00cvss 7.8epss 0.00
After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed.
- risk 0.00cvss 7.8epss 0.00
The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggering an illegal read and crashing.
- risk 0.00cvss 7.8epss 0.00
When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinations. This results in the internal objects entering an invalid state. Eventually, during the…
- risk 0.00cvss 7.8epss 0.00
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the…
- risk 0.00cvss 7.8epss 0.00
The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a…