CWE-416 · Use After Free (page 7)
Page 7 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-63380 | | 2026-08-20 | Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evws_new_session enters its error… | |
CVE-2026-18299 | High | 7.8 | 2026-08-20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst… |
CVE-2026-76957 | Medium | 4.9 | 2026-08-20 | libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-502… |
CVE-2026-76921 | Medium | 5.5 | 2026-08-19 | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-16851 | High | 7.4 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free. |
CVE-2026-58083 | High | 8.4 | 2026-08-19 | While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was c… |
CVE-2026-49422 | High | 8.4 | 2026-08-19 | The RACK setsockopt(2) handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies… |
CVE-2026-49418 | High | 8.8 | 2026-08-19 | When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pa… |
CVE-2026-76045 | High | 8.8 | 2026-08-18 | Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-76040 | High | 8.8 | 2026-08-18 | Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code… |
CVE-2026-63639 | High | 8.8 | 2026-08-18 | Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload t… |
CVE-2026-56684 | High | 7.5 | 2026-08-18 | Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list whi… |
CVE-2026-74973 | Medium | 4.2 | 2026-08-18 | Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153… |
CVE-2026-74969 | High | 8.8 | 2026-08-18 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1… |
CVE-2026-74949 | High | 8.8 | 2026-08-18 | Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 15… |
CVE-2026-74944 | Critical | 9.8 | 2026-08-18 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderb… |
CVE-2026-74943 | Critical | 9.8 | 2026-08-18 | Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thu… |
CVE-2026-74940 | Critical | 9.8 | 2026-08-18 | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunder… |
CVE-2026-74937 | High | 8.8 | 2026-08-18 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
CVE-2026-74936 | Critical | 9.8 | 2026-08-18 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T… |
CVE-2026-65343 | High | 7.5 | 2026-08-17 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionO… |
CVE-2026-65341 | Medium | 5.4 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macO… |
CVE-2026-65338 | Medium | 4.3 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macO… |
CVE-2026-64787 | Medium | 6.5 | 2026-08-17 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPad… |
CVE-2026-64715 | Medium | 6.5 | 2026-08-17 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPad… |
CVE-2026-28984 | Medium | 4.3 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Taho… |
CVE-2026-49306 | Low | 3.3 | 2026-08-17 | UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-12366 | High | 8.8 | 2026-08-14 | Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference cou… |
CVE-2026-12365 | Medium | 5.8 | 2026-08-14 | A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work timeouts. When a delayable work item's tim… |
CVE-2026-11937 | Low | 3.1 | 2026-08-12 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0… |
CVE-2026-19548 | Medium | 5.5 | 2026-08-12 | Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root… |
CVE-2026-19560 | High | 8.8 | 2026-08-11 | Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-19559 | High | 8.8 | 2026-08-11 | Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (… |
CVE-2026-19558 | High | 7.5 | 2026-08-11 | Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbi… |
CVE-2026-19557 | High | 8.3 | 2026-08-11 | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2026-19556 | High | 8.8 | 2026-08-11 | Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2026-73282 | Medium | 4.8 | 2026-08-11 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. |
CVE-2026-18711 | High | 7.1 | 2026-08-11 | An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used… |
CVE-2026-18706 | Medium | 6.6 | 2026-08-11 | An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause… |
CVE-2026-18700 | Medium | 6.5 | 2026-08-11 | An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the… |
CVE-2026-18692 | High | 8.8 | 2026-08-11 | An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to… |
CVE-2026-0465 | | 2026-08-11 | A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in los… | |
CVE-2026-70311 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-70307 | High | 7.0 | 2026-08-11 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-68820 | High | 7.0 | 2026-08-11 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-66802 | High | 8.1 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized a… |
CVE-2026-65789 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-65788 | High | 7.0 | 2026-08-11 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65783 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65782 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65781 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65779 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65778 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65776 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65775 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65678 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65657 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62908 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p… |
CVE-2026-62898 | High | 7.5 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
CVE-2026-62893 | Critical | 9.8 | 2026-08-11 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-62892 | High | 7.0 | 2026-08-11 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62888 | High | 7.8 | 2026-08-11 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-62819 | High | 8.1 | 2026-08-11 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-62818 | High | 8.8 | 2026-08-11 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. |
CVE-2026-62815 | Critical | 9.8 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
CVE-2026-62795 | High | 8.8 | 2026-08-11 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2026-62788 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62787 | High | 7.5 | 2026-08-11 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
CVE-2026-62780 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62779 | High | 7.8 | 2026-08-11 | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62778 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-62774 | High | 7.0 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62773 | High | 7.0 | 2026-08-11 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62749 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62748 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62734 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62729 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62726 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62725 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62724 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62723 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62711 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62708 | Medium | 6.4 | 2026-08-11 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-62707 | High | 7.8 | 2026-08-11 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62705 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev… |
CVE-2026-62701 | High | 7.8 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62693 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele… |
CVE-2026-62690 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-61939 | High | 7.0 | 2026-08-11 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
CVE-2026-61938 | High | 7.0 | 2026-08-11 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-61934 | High | 7.8 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61929 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61927 | High | 7.0 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61920 | Medium | 6.6 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a… |
CVE-2026-61361 | High | 7.0 | 2026-08-11 | Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. |
CVE-2026-61357 | High | 7.8 | 2026-08-11 | Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-61349 | High | 7.8 | 2026-08-11 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-61348 | High | 7.0 | 2026-08-11 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-61346 | High | 7.0 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-59125 | High | 7.0 | 2026-08-11 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |