The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
8,051 vulnerabilities with CWE-416
CVE-2026-15905
HIGH
Google Chrome - Use After Free
CVSS 7.8
CVE-2026-15904
HIGH
Google Chrome - Use After Free
CVSS 8.8
CVE-2026-15902
HIGH
Google Chrome - Use After Free
CVSS 8.8
CVE-2026-15901
CRITICAL
Google Chrome - Use After Free
CVSS 9.6
CVE-2026-15900
CRITICAL
Google Chrome - Use After Free
CVSS 9.6
CVE-2026-15899
CRITICAL
Google Chrome - Use After Free
CVSS 9.6
CVE-2026-63804
HIGH
gfs2: fix use-after-free in gfs2_qd_dealloc
CVSS 7.8
CVE-2026-63803
HIGH
hdlc_ppp: sync per-proto timers before freeing hdlc state
CVSS 7.8
CVE-2026-63802
HIGH
blk-cgroup: fix UAF in __blkcg_rstat_flush()
CVSS 7.8
CVE-2026-63801
HIGH
tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
CVSS 8.8
CVE-2026-63800
CRITICAL
pNFS: Fix use-after-free in pnfs_update_layout()
CVSS 9.8
CVE-2026-63797
HIGH
rpmsg: char: Fix use-after-free on probe error path
CVSS 8.4
CVE-2026-63795
CRITICAL
9p: avoid putting oldfid in p9_client_walk() error path
CVSS 10.0
CVE-2026-63793
HIGH
ntfs: serialize volume label accesses
CVSS 7.8
CVE-2026-53401
HIGH
fbdev: omap2: fix use-after-free in omapfb_mmap
CVSS 7.8
CVE-2026-53389
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-53388
HIGH
fuse: re-lock request before replacing page cache folio
CVSS 7.8
CVE-2026-53384
CRITICAL
serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
CVSS 9.8
CVE-2026-53381
HIGH
virtiofs: fix UAF on submount umount
CVSS 7.8
CVE-2026-58598
HIGH
Microsoft Windows 10 Version 21H2 - Windows Backup Service Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-57076
HIGH
YAML::Syck < 1.47 - syck_hdlr_add_anchor Use-After-Free
CVSS 7.8
CVE-2026-13713
MEDIUM
YAML::Syck < 1.47 - Anchor Redefinition Double-Free
CVSS 6.2
CVE-2026-55406
MEDIUM
Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref
CVE-2026-6424
MEDIUM
ESET Linux Security Products - Use-After-Free Kernel Panic
CVE-2026-38753
MEDIUM
Busybox 1.38.0 - Denial of Service via Crafted AWK Script in awk_sub() Function
CVSS 4.9
Details
Vulnerabilities
8,051
Exploit Likelihood
High