The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
7,457 vulnerabilities with CWE-416
CVE-2026-10007
HIGH
Google Chrome - Use After Free
CVSS 8.8
CVE-2026-10005
HIGH
Google Chrome - Use After Free
CVSS 7.5
CVE-2026-10003
HIGH
Google Chrome - Use After Free
CVSS 7.5
CVE-2026-10002
HIGH
Google Chrome - Use After Free
CVSS 8.8
CVE-2026-10001
HIGH
Google Chrome - Use After Free
CVSS 8.3
CVE-2026-10000
HIGH
Google Chrome - Use After Free
CVSS 8.3
CVE-2026-47331
HIGH
Use-after-free in Ubuntu Linux AppArmor notification handling
CVSS 7.8
CVE-2026-46241
HIGH
spi: mpc52xx: fix use-after-free on registration failure
CVSS 7.8
CVE-2026-46240
HIGH
media: iris: Fix use-after-free in iris_release_internal_buffers()
CVSS 7.8
CVE-2026-46227
HIGH
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
CVSS 7.8
CVE-2026-46219
HIGH
spi: mpc52xx: fix use-after-free on unbind
CVSS 7.8
CVE-2026-46215
HIGH
drm: Set old handle to NULL before prime swap in change_handle
CVSS 7.8
CVE-2026-46213
HIGH
HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
CVSS 7.8
CVE-2026-46212
HIGH
batman-adv: bla: prevent use-after-free when deleting claims
CVSS 8.8
CVE-2026-46210
HIGH
media: iris: fix use-after-free of fmt_src during MBPF check
CVSS 7.8
CVE-2026-46180
HIGH
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
CVSS 7.8
CVE-2026-46166
HIGH
wifi: mac80211: use safe list iteration in radar detect work
CVSS 8.8
CVE-2026-46154
HIGH
sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
CVSS 7.0
CVE-2026-4390
MEDIUM
TeamSpeak 3 Server Connection State Management process_resend_queue use after free
CVSS 5.4
CVE-2026-46056
HIGH
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
CVSS 8.8
CVE-2026-46047
HIGH
net: qrtr: ns: Fix use-after-free in driver remove()
CVSS 7.8
CVE-2026-46036
HIGH
vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex
CVSS 7.8
CVE-2026-46011
HIGH
media: mtk-jpeg: fix use-after-free in release path due to uncancelled work
CVSS 7.8
CVE-2026-46004
HIGH
ALSA: caiaq: Handle probe errors properly
CVSS 7.8
CVE-2026-45998
HIGH
rxrpc: Fix potential UAF after skb_unshare() failure
CVSS 7.8
Details
Vulnerabilities
7,457
Exploit Likelihood
High