Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CWE-416

MITRE ↗

Use After Free

834
CRITICAL
5,751
HIGH
1,124
MEDIUM
88
LOW
7,832 CVEs · Page 31/157
7.0
CVE-2026-34770

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

7.0
CVE-2026-31426

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acp

7.0
CVE-2026-26165

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-26173

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

7.0
CVE-2026-26174

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Ser

7.0
CVE-2026-26177

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-26182

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-27908

Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-27917

Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate priv

7.0
CVE-2026-27921

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an

7.0
CVE-2026-27922

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-27926

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini

7.0
CVE-2026-32070

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-32073

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-32075

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges

7.0
CVE-2026-32080

Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-33099

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-33100

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-33104

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all

7.0
CVE-2026-33018

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a Use-Af

7.0
CVE-2026-43050

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable()

7.0
CVE-2026-34331

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all

7.0
CVE-2026-34340

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-34345

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an

7.0
CVE-2026-34347

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-35416

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an

7.0
CVE-2026-40410

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-42825

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-24200

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free

7.0
CVE-2026-46154

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under scx_cgroup_ops_rwsem

7.0
CVE-2026-34335

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-42836

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Servic

7.0
CVE-2026-42911

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-42984

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-45596

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

7.0
CVE-2026-45601

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

7.0
CVE-2026-45603

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

7.0
CVE-2026-45640

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-45653

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-47293

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-0125

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to loc

7.0
CVE-2026-49417

Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained va

7.0
CVE-2026-48571

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-48572

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer all

7.0
CVE-2026-49162

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-49183

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server

7.0
CVE-2026-49784

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Sto

7.0
CVE-2026-49802

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

7.0
CVE-2026-49806

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

Frequently Asked Questions

What is CWE-416?

CWE-416 (Use After Free) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-416?

There are 9,940 CVE records associated with CWE-416 in our database. Of these, 834 are critical severity, 5751 are high severity, and 1124 are medium severity.

How can I protect against CWE-416 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-416 using AI-powered security agents.

Detect CWE-416 Vulnerabilities

CyberStrike's AI agents automatically detect use after free vulnerabilities across your infrastructure.

Get Started