CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,684 vulnerabilities with CWE-416
CVE-2012-5145
Google Chrome <24.0.1312.52 - Use After Free
CVE-2012-4792 HIGH KEV
Microsoft Internet Explorer <9 - Use After Free
CVSS 8.8
CVE-2012-5140
Google Chrome <23.0.1271.97 - Use After Free
CVE-2012-5139
Google Chrome <23.0.1271.97 - Use After Free
CVE-2012-4787 CRITICAL
Microsoft Internet Explorer 9-10 - Use After Free
CVSS 9.0
CVE-2012-5137
Google Chrome <23.0.1271.95 - Use After Free
CVE-2012-5133
Google Chrome <23.0.1271.91 - Use After Free
CVE-2012-5840
Mozilla Firefox/Thunderbird/SeaMonkey Use-After-Free
CVE-2012-5830 HIGH
Mozilla Firefox < 17.0 - Use-After-Free
CVSS 8.8
CVE-2012-4218
Firefox < 17.0 - Use-After-Free in BuildTextRunsScanner
CVE-2012-4217
Mozilla Firefox < 17.0 - Use-After-Free in nsViewManager
CVE-2012-4216
Firefox < 17.0 - Use-After-Free in gfxFont::GetFontEntry
CVE-2012-4215
Mozilla Firefox < 17.0 - Use-After-Free in nsPlaintextEditor::FireClipboardEvent
CVE-2012-4214
Mozilla Firefox < 17.0 - Use-After-Free in nsTextEditorState::PrepareEditor
CVE-2012-4213
Firefox < 17.0 - Use-After-Free in nsEditor::FindNextLeafNode
CVE-2012-4212
Firefox < 17.0 - Use-After-Free in XPCWrappedNative::Mark
CVE-2012-1539 HIGH
Microsoft Internet Explorer 9 - Remote Code Execution via CTreePos Use After Free
CVSS 8.1
CVE-2012-5126
Google Chrome <23.0.1271.64 - Use After Free
CVE-2012-5125
Google Chrome <23.0.1271.64 - Use After Free
CVE-2012-5121
Google Chrome <23.0.1271.64 - Use After Free
CVE-2012-5116
Google Chrome <23.0.1271.64 - Use After Free
CVE-2012-4183
Firefox < 16.0 - Use-After-Free in DOMSVGTests::GetRequiredFeatures
CVE-2012-4182
Mozilla Firefox < 16.0 - Use-After-Free in nsTextEditRules::WillInsert
CVE-2012-4181
Firefox < 16.0 - Use-After-Free in nsSMILAnimationController::DoSample
CVE-2012-4179
Firefox < 16.0 - Use-After-Free in nsHTMLCSSUtils::CreateCSSPropertyTxn
Details
Vulnerabilities 7,684
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits