CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,548 vulnerabilities with CWE-416
CVE-2023-21108 HIGH
Android - Use-After-Free in sdp_discovery.cc
CVSS 8.8
CVE-2023-21101 HIGH
Android - Use-After-Free via Race Condition in WVDrmPlugin.cpp
CVSS 7.0
CVE-2023-33128 HIGH
Microsoft .NET and Visual Studio - Use-After-Free Remote Code Execution
CVSS 7.3
CVE-2023-32018 HIGH
Microsoft Windows Hello - Remote Code Execution
CVSS 7.8
CVE-2023-29365 HIGH
Microsoft Windows Media - Remote Code Execution
CVSS 7.8
CVE-2023-29361 HIGH
Windows Cloud Files Mini Filter Driver - Privilege Escalation
CVSS 7.0
CVE-2023-29358 HIGH
Windows 10 1507-22H2 and Windows 11 21H2-22H2 - Use-After-Free in GDI
CVSS 7.8
CVE-2023-3217 HIGH
Google Chrome < 114.0.5735.133 - Use-After-Free in WebXR
CVSS 8.8
CVE-2023-3215 HIGH
Chrome < 114.0.5735.133 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2023-3214 HIGH
Google Chrome < 114.0.5735.133 - Use-After-Free in Autofill Payments
CVSS 8.8
CVE-2023-3159 MEDIUM
Linux Kernel < 5.18 - Use-After-Free in Firewire Driver
CVSS 6.7
CVE-2023-34494 HIGH
NanoMQ 0.16.5 - Use-After-Free in nano_ctx_send Function
CVSS 7.5
CVE-2023-3141 HIGH
Linux Kernel 2.6.39-4.14.316 - Use-After-Free in r592_remove
CVSS 7.1
CVE-2023-33657 HIGH
NanoMQ 0.17.2 - Use-After-Free in mqtt_msg.c nni_mqtt_msg_get_publish_property()
CVSS 7.5
CVE-2023-33595 MEDIUM
CPython 3.12.0 alpha 7 - Use-After-Free in ascii_decode Function
CVSS 5.5
CVE-2023-30576 MEDIUM
Apache Guacamole 0.9.10-1.5.1 - Remote Code Execution via RDP Audio Input Buffer Use-After-Free
CVSS 6.8
CVE-2023-28653 HIGH
Application <version> - Use After Free
CVSS 7.8
CVE-2023-20744 MEDIUM
iot-yocto - Use-After-Free in vcu
CVSS 6.7
CVE-2023-3111 HIGH
Linux Kernel 2.6.31-4.14.318 - Use-After-Free in Btrfs Relocation
CVSS 7.8
CVE-2023-29543 HIGH
Firefox and Focus for Android < 112.0 - Use-After-Free in Debugger Vector
CVSS 8.8
CVE-2023-29536 HIGH
Firefox < 112.0 - Use-After-Free via Memory Manager
CVSS 8.8
CVE-2023-25739 HIGH
Firefox < 110.0, Firefox ESR < 102.8, Thunderbird < 102.8 - Use-After-Free in ScriptLoadContext
CVSS 8.8
CVE-2023-25735 HIGH
Firefox < 110.0, Firefox ESR < 102.8, Thunderbird < 102.8 - Use-After-Free via Scripted Proxy Wrapper
CVSS 8.8
CVE-2023-28469 MEDIUM
Arm Mali GPU Kernel Driver - Memory Corruption
CVSS 5.5
CVE-2023-2985 MEDIUM
Linux Kernel < 6.3 - Use-After-Free in hfsplus_put_super
CVSS 5.5
Details
Vulnerabilities 7,548
Exploit Likelihood High