Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-109619 Exploited Public exploit Scanner template EPSS 100%

    RCE via stale global state

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026
  • Critical 9.2
    CVE-2026-109618 Exploited Public exploit Scanner template EPSS 100%

    RCE via OOM corruption

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026
  • Critical 10.0
    CVE-2025-24085 Exploited Public exploit EPSS 17%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Jan 29, 2025
  • Critical 9.8
    CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

    An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
    KEV Oct 15, 2024
  • Critical 9.8
    CVE-2021-31166 Exploited Public exploit EPSS 100%

    HTTP Protocol Stack Remote Code Execution Vulnerability

    HTTP Protocol Stack Remote Code Execution Vulnerability

    Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows
    KEV Apr 6, 2022
  • Critical 9.8
    CVE-2020-3992 Exploited · Ransomware Public exploit EPSS 83%

    OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

    Microsoft Windows Windows Server Windows
    KEV Nov 3, 2021