The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
6,899 vulnerabilities with CWE-416
CVE-2026-31554
HIGH
futex: Require sys_futex_requeue() to have identical flags
CVSS 7.8
CVE-2026-31541
HIGH
tracing: Fix trace_marker copy link list updates
CVSS 7.8
CVE-2026-6919
Google Chrome < 147.0.7727.117 - Use After Free
CVE-2026-31533
CRITICAL
Linux - Use After Free
CVSS 9.8
CVE-2026-31532
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-31530
HIGH
cxl/port: Fix use after free of parent_port in cxl_detach_ep()
CVSS 7.8
CVE-2026-31527
HIGH
driver core: platform: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-31511
HIGH
Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
CVSS 7.8
CVE-2026-31504
HIGH
net: fix fanout UAF in packet_release() via NETDEV_UP race
CVSS 7.8
CVE-2026-31501
CRITICAL
net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
CVSS 9.8
CVE-2026-31500
HIGH
Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
CVSS 7.8
CVE-2026-31493
HIGH
RDMA/efa: Fix use of completion ctx after free
CVSS 7.8
CVE-2026-31490
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-31488
HIGH
drm/amd/display: Do not skip unrelated mode changes in DSC validation
CVSS 7.8
CVE-2026-31485
HIGH
spi: spi-fsl-lpspi: fix teardown order issue (UAF)
CVSS 7.8
CVE-2026-31474
HIGH
can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
CVSS 7.8
CVE-2026-31473
HIGH
media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
CVSS 7.8
CVE-2026-33259
MEDIUM
Concurrent modification of RPZ data can lead to denial of servce
CVSS 5.0
CVE-2026-5398
HIGH
Kernel use-after-free bug in the TIOCNOTTY handler
CVSS 8.4
CVE-2026-6784
HIGH
Memory safety bugs fixed in Firefox 150 and Thunderbird 150
CVSS 7.5
CVE-2026-6759
HIGH
Use-after-free in the Widget: Cocoa component
CVSS 7.5
CVE-2026-6758
HIGH
Use-after-free in the JavaScript: WebAssembly component
CVSS 7.5
CVE-2026-6754
HIGH
Use-after-free in the JavaScript Engine component
CVSS 7.5
CVE-2026-6747
HIGH
Use-after-free in the WebRTC component
CVSS 7.5
CVE-2026-6746
HIGH
Use-after-free in the DOM: Core & HTML component
CVSS 7.5
Details
Vulnerabilities
6,899
Exploit Likelihood
High