The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
6,899 vulnerabilities with CWE-416
CVE-2026-33416
HIGH
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
CVSS 7.5
CVE-2026-27828
HIGH
EVerest: ISO15118 session_setup use-after-free can crash EVSE process
CVSS 7.5
CVE-2026-27813
MEDIUM
EVerest has use-after-free in auth timeout timer via race condition
CVSS 5.3
CVE-2026-26071
MEDIUM
EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
CVSS 4.2
CVE-2026-33526
HIGH
Squid vulnerable to Denial of Service in ICP Request handling
CVSS 7.5
CVE-2026-32748
HIGH
Squid has Denial of Service in ICP Response handling
CVSS 7.5
CVE-2026-28529
HIGH
cryptodev-linux <= 1.14 get_userbuf Use After Free LPE
CVE-2026-23392
HIGH
netfilter: nf_tables: release flowtable after rcu grace period on error
CVSS 7.8
CVE-2026-23351
HIGH
netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
CVSS 7.8
CVE-2026-23344
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-23340
HIGH
net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
CVSS 7.8
CVE-2026-23336
HIGH
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
CVSS 7.8
CVE-2026-23322
HIGH
ipmi: Fix use-after-free and list corruption on sender error
CVSS 7.8
CVE-2026-23319
HIGH
bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
CVSS 7.8
CVE-2026-28879
MEDIUM
Apple Ios And Ipados < 18.7.7 - Denial of Service
CVSS 6.5
CVE-2026-28859
MEDIUM
Apple Safari < 26.4 - Denial of Service
CVSS 4.3
CVE-2026-28857
MEDIUM
Apple Safari < 26.4 - Denial of Service
CVSS 6.5
CVE-2026-28835
MEDIUM
Apple Macos < 14.8.5 - Use After Free
CVSS 6.5
CVE-2026-20687
HIGH
Apple Ios And Ipados < 18.7.7 - Denial of Service
CVSS 7.1
CVE-2026-20637
MEDIUM
Apple Ios And Ipados < 18.7.7 - Denial of Service
CVSS 6.2
CVE-2026-4725
CRITICAL
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
CVSS 10.0
CVE-2026-4723
CRITICAL
Use-after-free in the JavaScript Engine component
CVSS 9.8
CVE-2026-4711
CRITICAL
Use-after-free in the Widget: Cocoa component
CVSS 9.8
CVE-2026-4701
CRITICAL
Use-after-free in the JavaScript Engine component
CVSS 9.8
CVE-2026-4696
CRITICAL
Use-after-free in the Layout: Text and Fonts component
CVSS 9.8
Details
Vulnerabilities
6,899
Exploit Likelihood
High