CWE-416Variant35 in KEV

Use After Free

Stable in the CWE catalog · 4,192 CVEs mapped

4,192
CVEs mapped
35
In KEV
7.8
Median CVSS
What it is

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Recent examples
none
CVE-2026-20517

In geniezone, there is a possible escalation of privilege due to use after free

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781.

no explanation yet
epss
none
CVE-2026-20515

In gpu, there is a possible system crash due to use after free

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.

no explanation yet
epss
none
CVE-2026-20511

In SurfaceFlinger, there is a possible memory corruption due to use after free

In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890.

no explanation yet
epss
The record
Technical detail
CWE ID
CWE-416
Abstraction
Variant
Structure
Simple
Status
Stable
References (3)