Weakness (CWE)
CWE-416: Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
How to prevent it (2 mitigations)
-
Architecture and Design
Choose a language that provides automatic memory management.
-
Implementation
When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.
Source: MITRE CWE-416
6,513 results · Feed
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
HID class driver Information Disclosure Vulnerability
Use after free in HID class driver allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Connection Manager Service Elevation of Privilege Vulnerability
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
vhdmp.sys Elevation of Privilege Vulnerability
Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Brokering File System Elevation of Privilege Vulnerability
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
Windows Hyper-V Denial of Service Vulnerability
Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.
-
High 8.1
Windows Client for NFS Elevation of Privilege Vulnerability
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.
-
High 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Client for NFS Remote Code Execution Vulnerability
Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.4
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.
-
High 7.5
Microsoft PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.
-
High 7.5
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. T…
-
High 7.8
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
RPC Runtime Elevation of Privilege Vulnerability
Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0CVE-2026-100204 Public exploit
HEIF Image Extensions Remote Code Execution Vulnerability
Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.
-
High 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
-
Medium 6.8
Use after free in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor…
-
Medium 6.8
Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivilege…
-
Medium 5.8
Use after free for some Intel(R) Wireless Software for Windows within Ring 3: User Applications may allow denial of ser…
-
High 8.8
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code insid…
KEV Nov 10, 2026 -
Medium 6.9
Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a…
-
High 8.8
Use-after-free in the Audio/Video component
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
-
High 8.8
Use-after-free in the Layout component
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.