CWE-416 · Use After Free (page 11)
Page 11 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-50425 | High | 7.8 | 2026-07-14 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
CVE-2026-50414 | High | 7.5 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50413 | High | 8.8 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50410 | High | 7.0 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50406 | High | 7.0 | 2026-07-14 | Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
CVE-2026-50404 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50403 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50398 | High | 8.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50397 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50396 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-50393 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-50392 | High | 7.0 | 2026-07-14 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-50385 | High | 8.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50379 | High | 7.5 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50374 | Medium | 6.3 | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2026-50371 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privilege… |
CVE-2026-50369 | High | 8.8 | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50359 | High | 7.0 | 2026-07-14 | Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-50358 | High | 7.0 | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50353 | High | 7.8 | 2026-07-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-50348 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
CVE-2026-50345 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50340 | High | 8.5 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50331 | High | 7.8 | 2026-07-14 | Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. |
CVE-2026-50329 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50326 | High | 7.8 | 2026-07-14 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50322 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50321 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv… |
CVE-2026-50317 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to eleva… |
CVE-2026-50314 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-50312 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-50307 | High | 7.0 | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-50306 | High | 7.8 | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-50305 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-47642 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-47290 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-58608 | High | 8.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t… |
CVE-2026-58602 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58526 | High | 7.0 | 2026-07-14 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-55948 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55000 | Medium | 6.4 | 2026-07-14 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-54995 | High | 8.1 | 2026-07-14 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
CVE-2026-54989 | High | 7.0 | 2026-07-14 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
CVE-2026-54129 | High | 7.0 | 2026-07-14 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-54127 | High | 7.4 | 2026-07-14 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-54114 | High | 7.8 | 2026-07-14 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-54112 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
CVE-2026-50694 | High | 8.1 | 2026-07-14 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
CVE-2026-50384 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate pr… |
CVE-2026-50354 | High | 7.1 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50323 | High | 7.0 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50296 | High | 7.0 | 2026-07-14 | Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50293 | High | 7.8 | 2026-07-14 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. |
CVE-2026-49808 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
CVE-2026-49806 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
CVE-2026-49802 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
CVE-2026-49798 | Critical | 9.3 | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-49795 | High | 8.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49784 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to ele… |
CVE-2026-49183 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevat… |
CVE-2026-49173 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49171 | High | 7.5 | 2026-07-14 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
CVE-2026-49169 | High | 8.0 | 2026-07-14 | Use after free in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-49167 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49166 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-49162 | High | 7.0 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-48572 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate p… |
CVE-2026-48571 | High | 7.0 | 2026-07-14 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-44800 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-42900 | High | 8.1 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate pri… |
CVE-2026-40467 | High | 7.5 | 2026-07-13 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in ver… |
CVE-2026-10667 | High | 7.8 | 2026-07-12 | Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically al… |
CVE-2026-10663 | Medium | 6.1 | 2026-07-12 | In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c) freed the root usb_device slab object… |
CVE-2026-61861 | Low | 3.7 | 2026-07-11 | ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memor… |
CVE-2026-34196 | High | 7.8 | 2026-07-10 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the… |
CVE-2026-56373 | Low | 3.7 | 2026-07-10 | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can tr… |
CVE-2026-15194 | Low | 3.3 | 2026-07-09 | A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performin… |
CVE-2026-15133 | High | 8.8 | 2026-07-08 | Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… |
CVE-2026-15129 | High | 8.8 | 2026-07-08 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2026-15126 | High | 8.8 | 2026-07-08 | Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-15121 | High | 8.8 | 2026-07-08 | Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-15120 | High | 8.3 | 2026-07-08 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2026-15118 | High | 8.8 | 2026-07-08 | Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-15117 | High | 7.5 | 2026-07-08 | Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
CVE-2026-15116 | High | 8.8 | 2026-07-08 | Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-15113 | Critical | 9.6 | 2026-07-08 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted… |
CVE-2026-15112 | High | 8.8 | 2026-07-08 | Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2026-15111 | High | 7.5 | 2026-07-08 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentiall… |
CVE-2026-15110 | High | 8.8 | 2026-07-08 | Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2026-15107 | High | 8.8 | 2026-07-08 | Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pa… |
CVE-2026-57256 | High | 7.8 | 2026-07-08 | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form… |
CVE-2026-57252 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel… |
CVE-2026-57250 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the ap… |
CVE-2026-57249 | High | 7.8 | 2026-07-08 | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the r… |
CVE-2026-57247 | High | 7.8 | 2026-07-08 | The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before… |
CVE-2026-57245 | High | 7.8 | 2026-07-08 | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationship… |
CVE-2026-57244 | High | 7.8 | 2026-07-08 | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the c… |
CVE-2026-57242 | High | 7.8 | 2026-07-08 | The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value val… |
CVE-2026-57240 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid point… |
CVE-2026-57238 | High | 7.8 | 2026-07-08 | After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the appli… |