CWE-416 · Use After Free

8187 CVEs classified under CWE-416 (Use After Free). Browse by severity and year.

Top CVEs for CWE-416
CVESeverityScorePublishedSummary
CVE-2026-16367Critical10.02026-07-21Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-63795Critical10.02026-07-19In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called w…
CVE-2026-13782Critical10.02026-06-30Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a s…
CVE-2026-4725Critical10.02026-03-24Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
CVE-2026-4688Critical10.02026-03-24Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149…
CVE-2025-24085Critical10.02025-01-27A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…
CVE-2024-43102Critical10.02024-09-05Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference c…
CVE-2021-32495Critical10.02023-07-07Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to ca…
CVE-2021-33796Critical10.02023-07-07In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
CVE-2021-22893Critical10.02021-04-23Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure…
CVE-2016-6082Critical10.02017-02-01IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit…
CVE-2026-57092Critical9.92026-07-14Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
CVE-2025-49708Critical9.92025-10-14Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
CVE-2025-49844Critical9.92025-10-03Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script t…
CVE-2009-3616Critical9.92009-10-23Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host…
CVE-2026-62893Critical9.82026-08-11Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-62815Critical9.82026-08-11Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-0163Critical9.82026-08-04In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no add…
CVE-2026-64751Critical9.82026-07-27A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26…
CVE-2026-64729Critical9.82026-07-27A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26…
All CVEs classified under CWE-416 — newest first (page 1 of 82)
CVESeverityScorePublishedSummary
CVE-2026-49306Low3.32026-08-17UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-12366High8.82026-08-14Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference cou…
CVE-2026-12365Medium5.82026-08-14A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work timeouts. When a delayable work item's tim…
CVE-2026-11937Low3.12026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0…
CVE-2026-19548Medium5.52026-08-12Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root…
CVE-2026-19560High8.82026-08-11Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page…
CVE-2026-19559High8.82026-08-11Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (…
CVE-2026-19558High7.52026-08-11Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbi…
CVE-2026-19557High8.32026-08-11Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially pe…
CVE-2026-19556High8.82026-08-11Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…
CVE-2026-73282Medium4.82026-08-11In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
CVE-2026-18711High7.12026-08-11An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used…
CVE-2026-18706Medium6.62026-08-11An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause…
CVE-2026-18700Medium6.52026-08-11An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the…
CVE-2026-18692High8.82026-08-11An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to…
CVE-2026-04652026-08-11A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in los…
CVE-2026-70311High7.82026-08-11Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70307High7.02026-08-11Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-68820High7.02026-08-11Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-66802High8.12026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestatio…
CVE-2026-65789High8.12026-08-11Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-65788High7.02026-08-11Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65783High7.02026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65782High7.02026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65781High7.02026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65779High7.02026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65778High7.02026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65776High7.02026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65775High7.82026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65678High7.02026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65657High7.82026-08-11Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62908High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p…
CVE-2026-62898High7.52026-08-11Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVE-2026-62893Critical9.82026-08-11Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-62892High7.02026-08-11Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-62888High7.82026-08-11Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62819High8.12026-08-11Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-62818High8.82026-08-11Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
CVE-2026-62815Critical9.82026-08-11Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-62795High8.82026-08-11Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-62788High7.02026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62787High7.52026-08-11Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-62780High7.02026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62779High7.82026-08-11Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-62778High8.12026-08-11Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62774High7.02026-08-11Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62773High7.02026-08-11Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62749High7.02026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62748High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…
CVE-2026-62734High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…
CVE-2026-62729High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…
CVE-2026-62726High7.02026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62725High7.02026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62724High7.02026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62723High7.02026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62711High7.82026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62708Medium6.42026-08-11Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-62707High7.82026-08-11Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-62705High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev…
CVE-2026-62701High7.82026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62693High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele…
CVE-2026-62690High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev…
CVE-2026-61939High7.02026-08-11Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2026-61938High7.02026-08-11Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61934High7.82026-08-11Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61929High7.02026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61927High7.02026-08-11Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61920Medium6.62026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a…
CVE-2026-61361High7.02026-08-11Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
CVE-2026-61357High7.82026-08-11Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61349High7.82026-08-11Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVE-2026-61348High7.02026-08-11Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-61346High7.02026-08-11Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-59125High7.02026-08-11Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-59122High7.02026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva…
CVE-2026-240992026-08-11Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with…
CVE-2026-73071Low3.32026-08-11Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_st…
CVE-2026-53415High8.32026-08-11Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network ac…
CVE-2026-50061High7.82026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap…
CVE-2026-50060High7.82026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap…
CVE-2026-71968Medium6.72026-08-10OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the abi…
CVE-2026-11742Low3.62026-08-07The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue's data_q list, reading the node's flag byte and, for items…
CVE-2026-718472026-08-07Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer bu…
CVE-2026-43632High8.12026-08-06llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detok…
CVE-2026-43631High8.12026-08-06llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feat…
CVE-2026-1289High7.82026-08-06A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability…
CVE-2026-19176High7.52026-08-06Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code in…
CVE-2026-19175Critical9.62026-08-06Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page…
CVE-2026-19172High8.32026-08-06Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…
CVE-2026-19171Critical9.62026-08-06Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM…
CVE-2026-19170Critical9.62026-08-06Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM…
CVE-2026-19166Critical9.62026-08-06Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted H…
CVE-2026-19165High7.52026-08-06Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbi…
CVE-2026-19163High8.32026-08-06Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially p…
CVE-2026-19159High7.52026-08-06Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentiall…
CVE-2026-19158High7.52026-08-06Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to…
CVE-2026-19155High8.32026-08-06Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a…
CVE-2026-19154High8.32026-08-06Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially pe…
CVE-2026-19151High8.82026-08-06Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…
CVE-2026-19149Critical9.62026-08-06Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p…