Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CWE-416

MITRE ↗

Use After Free

834
CRITICAL
5,751
HIGH
1,124
MEDIUM
88
LOW
7,832 CVEs · Page 26/157
7.8
CVE-2026-56643

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-56644

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-58536

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-58537

Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges loc

7.8
CVE-2026-58613

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-58632

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-58633

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-58634

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-57076

YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key i

7.8
CVE-2026-53381

In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called

7.8
CVE-2026-53388

In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache f

7.8
CVE-2026-53389

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async

7.8
CVE-2026-53401

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap om

7.8
CVE-2026-63793

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-

7.8
CVE-2026-63802

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When

7.8
CVE-2026-63803

In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc

7.8
CVE-2026-63804

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_q

7.8
CVE-2026-64099

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays

7.8
CVE-2026-64103

In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal pa

7.8
CVE-2026-64123

In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU rea

7.8
CVE-2026-64188

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free i

7.8
CVE-2026-15905

Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap cor

7.8
CVE-2026-49743

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of

7.8
CVE-2026-64221

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup fa

7.8
CVE-2026-64226

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() in

7.8
CVE-2026-64239

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regi

7.8
CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode()

7.8
CVE-2026-64246

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-f

7.8
CVE-2026-64249

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_w

7.8
CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_

7.8
CVE-2026-64259

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only find

7.8
CVE-2026-64261

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_asyn

7.8
CVE-2026-64265

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remo

7.8
CVE-2026-64266

In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_re

7.8
CVE-2026-17862

Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-leve

7.8
CVE-2026-1289

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A maliciou

7.8
CVE-2026-50060

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versi

7.8
CVE-2026-50061

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versi

7.8
CVE-2026-61349

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-61357

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-61934

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-62701

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-62707

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-62711

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-62779

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-62888

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-65657

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

7.8
CVE-2026-65775

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-70311

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

7.8
CVE-2026-18299

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to

Frequently Asked Questions

What is CWE-416?

CWE-416 (Use After Free) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-416?

There are 9,940 CVE records associated with CWE-416 in our database. Of these, 834 are critical severity, 5751 are high severity, and 1124 are medium severity.

How can I protect against CWE-416 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-416 using AI-powered security agents.

Detect CWE-416 Vulnerabilities

CyberStrike's AI agents automatically detect use after free vulnerabilities across your infrastructure.

Get Started