Skip to content
BackEsc
Sign in

CWE-416 · weakness in Memory Corruption

Use After Free

9,606 CVEs · 107 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
107
check available
2
likely to be exploited
214

Every one of the 9,606 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionCVE-2026-109619PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

    PHPChina-nexus actorLazarus Group59 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

  2. PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionCVE-2026-109618PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

    PHPChina-nexus actorLazarus Group60 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

  3. A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RD…CVE-2019-0708Microsoft · CVSS 9.8 · 100% likelycovered by CyberSIXT

    MicrosoftNightEagle2 articles

  4. HTTP Protocol Stack Remote Code Execution VulnerabilityCVE-2021-31166Microsoft · CVSS 9.8 · 100% likely

    Microsoft

  5. Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows…CVE-2015-5119Adobe · CVSS 7.8 · 99% likely

    AdobeBlackTech

  6. Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token…CVE-2010-3962Microsoft · CVSS 8.1 · 97% likely

    Microsoft

  7. Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote att…CVE-2015-0313Adobe · CVSS 7.8 · 95% likely

    Adobe

  8. Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and S…CVE-2010-0249Microsoft · CVSS 8.8 · 92% likelycovered by CyberSIXT

    Microsoft

  9. A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media pl…CVE-2018-4878Adobe · CVSS 7.8 · 90% likely

    AdobeAPT37Lazarus Group

  10. Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2018-15982Adobe · CVSS 7.8 · 90% likely

    Adobe

  11. Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via…CVE-2013-3893Microsoft · CVSS 8.8 · 88% likely

    MicrosoftAxiom

  12. A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users…CVE-2016-9079Mozilla · CVSS 7.5 · 87% likely

    Mozilla

  13. Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through…CVE-2015-5122Adobe · CVSS 7.8 · 87% likely

    Adobe

  14. A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabi…CVE-2020-0674Microsoft · CVSS 7.5 · 87% likely

    MicrosoftSideWinder

  15. Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and…CVE-2014-0322Microsoft · CVSS 8.8 · 85% likely

    MicrosoftAxiom

  16. OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor…CVE-2020-3992VMware · CVSS 9.8 · 83% likely

    VMware

  17. Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vec…CVE-2014-1776Microsoft · CVSS 9.8 · 83% likely

    MicrosoftAPT3

  18. Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via v…CVE-2010-0806Microsoft · CVSS 8.8 · 82% likelycovered by CyberSIXT

    Microsoft

  19. Win32k Elevation of Privilege VulnerabilityCVE-2021-40449Microsoft · CVSS 7.8 · 82% likely

    Microsoft

  20. Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows rem…CVE-2009-4324Adobe · CVSS 7.8 · 82% likely

    AdobeAPT12

  21. Internet Explorer Memory Corruption VulnerabilityCVE-2021-26411Microsoft · CVSS 8.8 · 82% likely

    MicrosoftAPT37

  22. Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a craft…CVE-2012-4969Microsoft · CVSS 8.1 · 80% likely

    Microsoft

  23. Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object…CVE-2012-4792Microsoft · CVSS 8.8 · 79% likely

    MicrosoftAxiom

  24. Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office R…CVE-2017-0261Microsoft Corporation · CVSS 7.8 · 78% likely

    Microsoft

  25. Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly…CVE-2013-1347Microsoft · CVSS 8.8 · 78% likely

    Microsoft

  26. Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a de…CVE-2013-3897Microsoft · CVSS 8.8 · 77% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in