CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,483 vulnerabilities with CWE-416
CVE-2026-33526 HIGH
Squid vulnerable to Denial of Service in ICP Request handling
CVSS 7.5
CVE-2026-32748 HIGH
Squid has Denial of Service in ICP Response handling
CVSS 7.5
CVE-2026-28529 HIGH
cryptodev-linux <= 1.14 get_userbuf Use After Free LPE
CVE-2026-23392 HIGH
netfilter: nf_tables: release flowtable after rcu grace period on error
CVSS 7.8
CVE-2026-23351 HIGH
netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
CVSS 7.8
CVE-2026-23344 HIGH
Linux Kernel - Use-After-Free in SEV TSM Initialization Error Path
CVSS 7.8
CVE-2026-23340 HIGH
net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
CVSS 7.8
CVE-2026-23336 HIGH
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
CVSS 7.8
CVE-2026-23322 HIGH
ipmi: Fix use-after-free and list corruption on sender error
CVSS 7.8
CVE-2026-23319 HIGH
Linux Kernel bpf_trampoline_link_cgroup_shim - Use-After-Free
CVSS 7.8
CVE-2026-23306 HIGH
scsi: pm8001: Fix use-after-free in pm8001_queue_command()
CVSS 7.8
CVE-2026-23281 HIGH
wifi: libertas: fix use-after-free in lbs_free_adapter()
CVSS 7.8
CVE-2026-28879 MEDIUM
iOS and iPadOS < 18.7.7 - Use-After-Free
CVSS 6.5
CVE-2026-28859 MEDIUM
Safari < 26.4 - Out-of-bounds Read
CVSS 4.3
CVE-2026-28857 MEDIUM
Safari < 26.4 - Out-of-bounds Read via Malicious Web Content
CVSS 6.5
CVE-2026-28835 MEDIUM
macOS < 14.8.5, < 15.7.5, < 26.4 - Use-After-Free via Malicious SMB Network Share
CVSS 6.5
CVE-2026-20687 HIGH
iOS and iPadOS < 18.7.7 - Use-After-Free
CVSS 7.1
CVE-2026-20637 MEDIUM
iOS and iPadOS < 18.7.7 - Use-After-Free
CVSS 6.2
CVE-2026-4725 CRITICAL
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
CVSS 10.0
CVE-2026-4723 CRITICAL
Use-after-free in the JavaScript Engine component
CVSS 9.8
CVE-2026-4711 CRITICAL
Use-after-free in the Widget: Cocoa component
CVSS 9.8
CVE-2026-4701 CRITICAL
Use-after-free in the JavaScript Engine component
CVSS 9.8
CVE-2026-4696 CRITICAL
Use-after-free in the Layout: Text and Fonts component
CVSS 9.8
CVE-2026-4691 CRITICAL
Use-after-free in the CSS Parsing and Computation component
CVSS 9.8
CVE-2026-4688 CRITICAL
Sandbox escape due to use-after-free in the Disability Access APIs component
CVSS 10.0
Details
Vulnerabilities 7,483
Exploit Likelihood High