CWE-416: Use after free
9,882 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 108 of them as exploited in the wild.
- Published CVEs
- 9,882
- Last 12 months
- 3,549
- Critical
- 1,056
- Known exploited
- 108
Critical 1,056High 7,228Medium 1,455Low 141Not scored 2
CVEs per yearBy the year they were published
- 201545
- 2016157
- 2017295
- 2018432
- 2019574
- 2020380
- 2021557
- 2022731
- 2023649
- 20241,260
- 20251,089
- 20263,461
Known exploitedNewest addition to KEV first
- CVE-2026-109619
RCE via stale global state
PHP Group · PHP
ExploitedCritical9.2 - CVE-2026-109618
RCE via OOM corruption
PHP Group · PHP
ExploitedCritical9.2 - CVE-2026-68820
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.0 - CVE-2010-0806
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute…
Product not named
ExploitedHigh8.8 - CVE-2010-0249
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows…
Product not named
ExploitedHigh8.8 - CVE-2020-9715
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free…
Adobe · Adobe Acrobat and Reader
ExploitedHigh7.8 - CVE-2026-5281
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…
Google · Chrome
ExploitedHigh8.8 - CVE-2023-43000
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS…
Apple · macOS
ExploitedHigh8.8 - CVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2026-2441
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8
Newest CVEs
- CVE-2026-124308
Fraunhofer HHI VVdeC before 3.2.1 Use-After-Free via DecLibRecon::createSubPicRefBufs
fraunhoferhhi · vvdec
Medium5.8 - CVE-2026-124307
Fraunhofer HHI VVdeC before 3.2.1 Heap Use-After-Free via ALF APS Redefinition
fraunhoferhhi · vvdec
Medium5.8 - CVE-2026-124040
CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State
civetweb · civetweb
Critical9.2 - CVE-2026-93424
FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments
pavel-odintsov · fastnetmon
High7.5 - CVE-2026-69043
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
Samsung Semiconductor · Exynos 2200
Not scored - CVE-2026-69044
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
Samsung Semiconductor · Exynos 1580
Not scored - CVE-2026-82418
IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL
IBM · Watson Speech Services Cartridge
Critical9.8 - CVE-2026-121963
FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
FreeRDP · FreeRDP
High8.2 - CVE-2026-121955
FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext
FreeRDP · FreeRDP
High8.7 - CVE-2026-121953
FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close
FreeRDP · FreeRDP
Critical9.3