The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
8,043 vulnerabilities with CWE-416
CVE-2026-52976
HIGH
drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
CVSS 7.8
CVE-2026-52973
HIGH
futex: Drop CLONE_THREAD requirement for private default hash alloc
CVSS 7.8
CVE-2026-52971
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-52951
HIGH
drm/xe/dma-buf: handle empty bo and UAF races
CVSS 7.8
CVE-2026-52950
HIGH
Linux Kernel DRM Xe DMA-BUF - Use-After-Free
CVSS 7.8
CVE-2026-52947
HIGH
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
CVSS 7.8
CVE-2026-52943
HIGH
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
CVSS 7.8
CVE-2026-52924
CRITICAL
sctp: purge outqueue on stale COOKIE-ECHO handling
CVSS 9.8
CVE-2026-52912
HIGH
netfilter: nf_queue: hold bridge skb->dev while queued
CVSS 7.8
CVE-2026-56117
MEDIUM
dhcpcd Heap Use-After-Free via Control Socket Handling
CVSS 4.7
CVE-2026-56113
MEDIUM
dhcpcd Heap Use-After-Free in dhcp6_deprecateaddrs via DHCPv6 RENEW
CVSS 5.3
CVE-2026-56376
LOW
ImageMagick - Heap Use-After-Free in Meta Coder
CVSS 3.7
CVE-2026-6653
CRITICAL
libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling
CVSS 9.8
CVE-2026-56412
MEDIUM
Libexpat < 2.8.2 - Use After Free
CVSS 4.9
CVE-2026-12706
MEDIUM
Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()
CVSS 6.5
CVE-2026-11941
MEDIUM
Use-after-free in connection ID iterator and FFI functions
CVSS 5.6
CVE-2026-41156
HIGH
GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference
CVSS 7.7
CVE-2026-34192
HIGH
GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries
CVSS 7.7
CVE-2026-56131
MEDIUM
Libexpat < 2.8.2 - Use After Free
CVSS 4.9
CVE-2026-11791
MEDIUM
389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()
CVSS 5.0
CVE-2026-9158
CRITICAL
Eclipse 4diac < 3.1.0 - Use After Free
CVSS 9.8
CVE-2026-42530
HIGH
NGINX Open-Source ngx_http_v3_module vulnerability
CVSS 8.1
CVE-2026-12467
HIGH
Google Chrome - Use After Free
CVSS 8.3
CVE-2026-12464
HIGH
Google Chrome - Use After Free
CVSS 8.3
CVE-2026-12462
HIGH
Google Chrome - Use After Free
CVSS 7.5
Details
Vulnerabilities
8,043
Exploit Likelihood
High