The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
7,483 vulnerabilities with CWE-416
CVE-2026-23432
HIGH
mshv: Fix use-after-free in mshv_map_user_memory error path
CVSS 7.8
CVE-2026-23428
CRITICAL
ksmbd: fix use-after-free of share_conf in compound request
CVSS 9.8
CVE-2026-23427
CRITICAL
ksmbd: fix use-after-free in durable v2 replay of active file handles
CVSS 9.8
CVE-2026-23415
HIGH
futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
CVSS 7.8
CVE-2026-23413
HIGH
clsact: Fix use-after-free in init/destroy rollback asymmetry
CVSS 7.8
CVE-2026-23412
HIGH
netfilter: bpf: defer hook memory release until rcu readers are done
CVSS 7.8
CVE-2026-5290
CRITICAL
Google Chrome < 146.0.7680.178 - Use-After-Free in Compositing
CVSS 9.6
CVE-2026-5289
CRITICAL
Google Chrome < 146.0.7680.178 - Use-After-Free in Navigation
CVSS 9.6
CVE-2026-5288
CRITICAL
Google Chrome < 146.0.7680.178 - Use-After-Free in WebView
CVSS 9.6
CVE-2026-5287
HIGH
Google Chrome < 146.0.7680.178 - Use-After-Free in PDF
CVSS 8.8
CVE-2026-5286
HIGH
Google Chrome < 146.0.7680.178 - Use-After-Free in Dawn
CVSS 8.8
CVE-2026-5285
HIGH
Google Chrome < 146.0.7680.178 - Remote Code Execution via WebGL Use-After-Free
CVSS 8.8
CVE-2026-5284
HIGH
Google Chrome < 146.0.7680.178 - Use-After-Free in Dawn
CVSS 7.5
CVE-2026-5281
HIGH
KEV
Google Chrome < 146.0.7680.178 - Use-After-Free in Dawn
CVSS 8.8
CVE-2026-5280
HIGH
Google Chrome < 146.0.7680.178 - Use-After-Free in WebCodecs
CVSS 8.8
CVE-2026-5278
HIGH
Google Chrome < 146.0.7680.178 - Use-After-Free in Web MIDI
CVSS 8.8
CVE-2026-5273
MEDIUM
Google Chrome < 146.0.7680.178 - Use-After-Free in CSS
CVSS 6.3
CVE-2026-3779
HIGH
Foxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability
CVSS 7.8
CVE-2026-3777
MEDIUM
Use after free of view cache in Foxit PDF Editor/Reader
CVSS 5.5
CVE-2026-27854
MEDIUM
Use after free when parsing EDNS options in Lua
CVSS 4.8
CVE-2026-27309
HIGH
Substance3D - Stager | Use After Free (CWE-416)
CVSS 7.8
CVE-2026-33416
HIGH
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
CVSS 7.5
CVE-2026-27828
HIGH
EVerest: ISO15118 session_setup use-after-free can crash EVSE process
CVSS 7.5
CVE-2026-27813
MEDIUM
EVerest has use-after-free in auth timeout timer via race condition
CVSS 5.3
CVE-2026-26071
MEDIUM
EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
CVSS 4.2
Details
Vulnerabilities
7,483
Exploit Likelihood
High