CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,548 vulnerabilities with CWE-416
CVE-2023-52266 HIGH
ehttp 1.0.6 - Use-After-Free in epoll_socket.cpp read_func
CVSS 7.5
CVE-2023-7152 MEDIUM
MicroPython 1.21.0/1.22.0-preview - Use-After-Free in poll_set_add_fd
CVSS 5.5
CVE-2023-6932 HIGH
Linux Kernel 2.6.12-6.7 - Use-After-Free in IGMP Component
CVSS 7.8
CVE-2023-6862 HIGH
Firefox ESR < 115.6 and Thunderbird < 115.6 - Use-After-Free in nsDNSService::Init
CVSS 8.8
CVE-2023-6859 HIGH
Firefox < 121.0, Firefox ESR < 115.6, Thunderbird < 115.6 - Use-After-Free in TLS Socket Creation
CVSS 8.8
CVE-2023-6817 HIGH
Linux Kernel 5.6-5.10.204 and 6.0-6.7 - Use-After-Free in nf_tables PIPAPO Set Walk
CVSS 7.8
CVE-2023-6707 HIGH
Google Chrome < 120.0.6099.109 - Use-After-Free in CSS
CVSS 8.8
CVE-2023-6706 HIGH
Google Chrome < 120.0.6099.109 - Use-After-Free in FedCM via Crafted HTML Page
CVSS 8.8
CVE-2023-6705 HIGH
Google Chrome < 120.0.6099.109 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2023-6704 HIGH
Google Chrome < 120.0.6099.109 - Use-After-Free in libavif via Crafted Image File
CVSS 8.8
CVE-2023-6703 HIGH
Chrome < 120.0.6099.109 - Use-After-Free in Blink via Crafted HTML Page
CVSS 8.8
CVE-2023-48633 HIGH
Adobe After Effects <24.0.3,23.6.0 - Use After Free
CVSS 7.8
CVE-2023-47075 HIGH
Adobe Illustrator <= 27.9 and 28.0 - Use-After-Free
CVSS 7.8
CVE-2023-35628 HIGH
Windows MSHTML Platform - Remote Code Execution via Use-After-Free
CVSS 8.1
CVE-2023-46156 HIGH
Siemens SIMATIC Devices - Denial of Service via Crafted Packets
CVSS 7.5
CVE-2023-48414 MEDIUM
Pixel Camera Driver - Use After Free
CVSS 6.7
CVE-2023-35618 CRITICAL
Microsoft Edge Chromium < 120.0.2210.61 - Elevation of Privilege via Use-After-Free
CVSS 9.6
CVE-2023-46751 HIGH
Artifex Ghostscript <10.02.0 - Memory Corruption
CVSS 7.5
CVE-2023-6510 HIGH
Google Chrome <120.0.6099.62 - Use After Free
CVSS 8.8
CVE-2023-6509 HIGH
Google Chrome <120.0.6099.62 - Use After Free
CVSS 8.8
CVE-2023-6508 HIGH
Google Chrome <120.0.6099.62 - Use After Free
CVSS 8.8
CVE-2023-33063 HIGH KEV
Qualcomm 315 5G IoT Modem Firmware - Use-After-Free in DSP Services
CVSS 7.8
CVE-2023-22668 MEDIUM
Qualcomm AQT1000 Firmware - Use-After-Free in Audio IOCTL Handling
CVSS 6.7
CVE-2023-22383 MEDIUM
Qualcomm FastConnect and AQT1000/C-V2X 9150 Firmware - Memory Corruption in Camera
CVSS 6.7
CVE-2023-49288 HIGH
Squid 3.5-5.9 - Use-After-Free via Collapsed Forwarding
CVSS 8.6
Details
Vulnerabilities 7,548
Exploit Likelihood High