The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
7,545 vulnerabilities with CWE-416
CVE-2024-30101
HIGH
Microsoft 365 Apps and Office - Remote Code Execution
CVSS 7.5
CVE-2024-30089
HIGH
Microsoft Streaming Service - Privilege Escalation
CVSS 7.8
CVE-2024-30086
HIGH
Windows Win32 Kernel - Privilege Escalation
CVSS 7.8
CVE-2024-30082
HIGH
Windows 10 1507-22H2, Windows 11 21H2-23H2, Windows Server 2008-2022 - Use-After-Free in Win32k
CVSS 7.8
CVE-2024-30080
CRITICAL
Microsoft Windows MSMQ - Remote Code Execution via Use-After-Free
CVSS 9.8
CVE-2024-30062
HIGH
Windows Standards-Based Storage Management - Remote Code Execution
CVSS 7.8
CVE-2024-5702
HIGH
Firefox < 125 and ESR < 115.12 - Use-After-Free in Networking Stack
CVSS 7.5
CVE-2024-5694
HIGH
Firefox < 127.0 - Use-After-Free in JavaScript Engine
CVSS 7.5
CVE-2024-5688
HIGH
Firefox < 127 and ESR < 115.12 - Use-After-Free during Object Transplant
CVSS 8.1
CVE-2024-36971
HIGH
KEV
Linux Kernel 4.6-6.9.3 Use-After-Free in __dst_negative_advice
CVSS 7.8
CVE-2024-32502
HIGH
Samsung Mobile Processor - Use After Free
CVSS 8.4
CVE-2024-32503
HIGH
Samsung Mobile Processor - Use After Free
CVSS 8.4
CVE-2024-4610
HIGH
KEV
Arm Bifrost and Valhall GPU Kernel Driver r34p0-r40p0 - Use-After-Free
CVSS 7.8
CVE-2024-5269
HIGH
Sonos Era 100 Firmware - Unauthenticated Use-After-Free via SMB2 Message Handling
CVSS 8.8
CVE-2024-30375
HIGH
Luxion KeyShot and KeyShot Viewer < 2024.2 - Use-After-Free in KSP File Parser
CVSS 7.8
CVE-2024-34362
MEDIUM
envoyproxy/envoy < 1.27.6 - Use-After-Free in HttpConnectionManager with EnvoyQuicServerStream
CVSS 5.9
CVE-2024-32974
MEDIUM
envoyproxy/envoy < 1.27.6 - Use-After-Free in QUICHE Push Request Headers
CVSS 5.9
CVE-2024-36844
HIGH
libmodbus v3.1.6 - Use-After-Free via ctx->backend Pointer
CVSS 7.5
CVE-2024-5498
HIGH
Google Chrome < 125.0.6422.141 - Use-After-Free in Presentation API
CVSS 8.8
CVE-2024-5496
HIGH
Google Chrome < 125.0.6422.141 - Use-After-Free in Media Session
CVSS 8.8
CVE-2024-5495
HIGH
Google Chrome < 125.0.6422.141 - Use-After-Free in Dawn via Crafted HTML Page
CVSS 8.8
CVE-2024-5494
HIGH
Google Chrome < 125.0.6422.141 - Use-After-Free in Dawn via Crafted HTML Page
CVSS 8.8
CVE-2024-36932
MEDIUM
Linux Kernel 6.8-6.8.9 - Use-After-Free in Thermal DebugFS Component
CVSS 5.5
CVE-2024-36904
HIGH
Linux Kernel 4.16-6.8.9 Use-After-Free in tcp_twsk_unique
CVSS 7.8
CVE-2024-36899
HIGH
Linux Kernel 5.7-6.6.31 - Use-After-Free in GPIO Lineinfo Notifier Chain
CVSS 7.0
Details
Vulnerabilities
7,545
Exploit Likelihood
High