Weakness (CWE)
CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
How to prevent it (2 mitigations)
-
Architecture and Design
Choose a language that provides automatic memory management.
-
Implementation
When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.
Source: MITRE CWE-416
4,651 results · Clear filters · Feed
-
High 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability
Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows TCP/IP Remote Code Execution Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.0
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Filter Manager Elevation of Privilege Vulnerability
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Print Spooler Components Remote Code Execution Vulnerability
Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows SMB Client Elevation of Privilege Vulnerability
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows COM Elevation of Privilege Vulnerability
Use after free in Windows COM allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows SMB Client Elevation of Privilege Vulnerability
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows NetBIOS Elevation of Privilege Vulnerability
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Event Collector Service Elevation of Privilege Vulnerability
Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows exFAT File System Elevation of Privilege Vulnerability
Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows USB Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Assistance Elevation of Privilege Vulnerability
Use after free in Windows Remote Assistance allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
High 7.0
Windows NetBIOS Elevation of Privilege Vulnerability
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Winsock Elevation of Privilege Vulnerability
Use after free in Winsock allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.