CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

6,899 vulnerabilities with CWE-416
CVE-2026-26165 HIGH
Windows Shell Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-23657 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-27283 HIGH
InDesign Desktop | Use After Free (CWE-416)
CVSS 7.8
CVE-2026-40311 MEDIUM
ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
CVSS 5.5
CVE-2026-6100 CRITICAL
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
CVE-2026-34859 MEDIUM
Huawei HarmonyOS <4.3.0 - Use After Free
CVSS 5.9
CVE-2026-34854 MEDIUM
Huawei HarmonyOS <6.0.0 - Use After Free
CVSS 5.7
CVE-2026-6068 MEDIUM
Nasm < nasm-3.02rc5 - Use After Free
CVSS 6.5
CVE-2026-5460 MEDIUM
Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3
CVSS 6.5
CVE-2026-34734 HIGH
HDF5: H5T__conv_struct Use After Free
CVSS 7.8
CVE-2026-34983 MEDIUM
Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`
CVSS 5.0
CVE-2026-34757 MEDIUM
LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure
CVSS 5.1
CVE-2026-5904 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-5883 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-5877 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-5874 CRITICAL
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 9.6
CVE-2026-5872 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-5866 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-5861 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-5860 HIGH
Google Chrome < 147.0.7727.55 - Use After Free
CVSS 8.8
CVE-2026-28387 HIGH
Potential Use-after-free in DANE Client Code
CVSS 8.1
CVE-2026-39316 MEDIUM
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer
CVSS 4.0
CVE-2026-35554 HIGH
Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition
CVSS 8.7
CVE-2026-34764 LOW
Electron has a use-after-free in offscreen shared texture release() callback
CVSS 2.3
CVE-2026-21380 HIGH
Use After Free in DSP Service
CVSS 7.8
Details
Vulnerabilities 6,899
Exploit Likelihood High