In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving d
In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of client_count in
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent race during ffs_ep0_queu
In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in run_one_delayed_ref()
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vm
In the Linux kernel, the following vulnerability has been resolved: vc_screen: move load of struct vc_data pointer in v
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessin
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during logout when accessi
In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bic_set_bfqq() Aft
In the Linux kernel, the following vulnerability has been resolved: net: fix UaF in netns ops registration error path
In the Linux kernel, the following vulnerability has been resolved: EDAC/qcom: Do not pass llcc_driv_data as edac_devic
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free
In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fi
In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in key_put() Once a key's reference
In the Linux kernel, the following vulnerability has been resolved: fuse: revert back to __readahead_folio() for readah
In the Linux kernel, the following vulnerability has been resolved: HID: hid-steam: Fix use-after-free when detaching d
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ish
In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid
In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rio_add_net() fails
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcp_wo
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wi
In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between
Memory corruption while handling file descriptor during listener registration/de-registration.
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threa
Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges
Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.
Animate versions 24.0.7, 23.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitra
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in r
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid
In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstrea
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function
In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block
In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device na
Frequently Asked Questions
What is CWE-416?
CWE-416 (Use After Free) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-416?
There are 9,940 CVE records associated with CWE-416 in our database. Of these, 834 are critical severity, 5751 are high severity, and 1124 are medium severity.
How can I protect against CWE-416 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-416 using AI-powered security agents.
Detect CWE-416 Vulnerabilities
CyberStrike's AI agents automatically detect use after free vulnerabilities across your infrastructure.
Get Started