CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,549 vulnerabilities with CWE-416
CVE-2023-2985 MEDIUM
Linux Kernel < 6.3 - Use-After-Free in hfsplus_put_super
CVSS 5.5
CVE-2023-2598 HIGH
Linux Kernel 6.3-6.3.2 - Use-After-Free in io_uring Buffer Registration
CVSS 7.8
CVE-2023-2933 HIGH
Google Chrome < 114.0.5735.90 - Use-After-Free in PDF
CVSS 8.8
CVE-2023-2932 HIGH
Google Chrome < 114.0.5735.90 - Use-After-Free in PDF
CVSS 8.8
CVE-2023-2931 HIGH
Google Chrome < 114.0.5735.90 - Use-After-Free in PDF
CVSS 8.8
CVE-2023-2930 HIGH
Google Chrome < 114.0.5735.90 - Use-After-Free in Extensions via Crafted HTML Page
CVSS 8.8
CVE-2023-28319 HIGH
curl < 8.1.0 - Use-After-Free in SSH Server Public Key Verification
CVSS 7.5
CVE-2023-31518 MEDIUM
teeworlds v0.7.5 - Denial of Service via Heap Use-After-Free in CDataFileReader::GetItem
CVSS 5.5
CVE-2023-33288 MEDIUM
Linux kernel <6.2.9 - Use After Free
CVSS 4.7
CVE-2023-33250 MEDIUM
Linux Kernel 6.3 - Use-After-Free in iopt_unmap_iova_range
CVSS 4.4
CVE-2023-30470 CRITICAL
Hermes - Use-After-Free via Bytecode Generation Optimization
CVSS 9.8
CVE-2023-28081 CRITICAL
Hermes - Use-After-Free via Bytecode Optimization Bug
CVSS 9.8
CVE-2023-24833 HIGH
Hermes < 2023-02-02 - Use-After-Free in BigIntPrimitive Addition
CVSS 7.5
CVE-2023-1195 MEDIUM
Linux Kernel < 6.1 - Use-After-Free in CIFS Hostname Handling
CVSS 5.5
CVE-2023-1859 MEDIUM
Linux Kernel - Use-After-Free in Xen 9pfs Frontend via Race Condition
CVSS 4.7
CVE-2023-2203 HIGH
WebKitGTK - Use-After-Free via Specially Crafted Web Content
CVSS 8.8
CVE-2023-31725 MEDIUM
yasm <1.3.0.55.g101bc - Use After Free
CVSS 5.5
CVE-2023-2725 HIGH
Google Chrome < 113.0.5672.126 - Use-After-Free in Guest View
CVSS 8.8
CVE-2023-2723 HIGH
Google Chrome < 113.0.5672.126 - Use-After-Free in DevTools
CVSS 8.8
CVE-2023-2722 HIGH
Google Chrome < 113.0.5672.126 - Use-After-Free in Autofill UI
CVSS 8.8
CVE-2023-2721 HIGH
Google Chrome < 113.0.5672.126 - Use-After-Free in Navigation
CVSS 8.8
CVE-2023-25006 HIGH
Autodesk 3ds Max USD < 0.3 - Use-After-Free via Malicious USD File
CVSS 7.8
CVE-2023-2458 HIGH
Google Chrome < 113.0.5672.114 - Use-After-Free in ChromeOS Camera via UI Interaction
CVSS 8.8
CVE-2023-31566 HIGH
Podofo v0.10.0 - Use-After-Free in PdfEncrypt::IsMetadataEncrypted()
CVSS 8.8
CVE-2023-29336 HIGH KEV
Windows 10 1507 < 10.0.10240.19926 and 1607 < 10.0.14393.5921 - Use-After-Free in Win32k
CVSS 7.8
Details
Vulnerabilities 7,549
Exploit Likelihood High