CWE-416 · Memory Corruption
Use After Free
9,607CVEs
107exploited
2with a public check
214likely (EPSS 10%+)
SortMost likely exploited
9,607 CVEs with CWE-416 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-109619In CISA KEVExploitedPHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionPHP Group · PHP · CVSS 9.2 · 2026-10-21 | 9.2 | 100% | 2026-10-21 |
| CVE-2026-109618In CISA KEVExploitedPHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionPHP Group · PHP · CVSS 9.2 · 2026-10-21 | 9.2 | 100% | 2026-10-21 |
| CVE-2019-0708In CISA KEVExploitedA remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RD…Microsoft · Windows · CVSS 9.8 · 2019-05-16 | 9.8 | 100% | 2019-05-16 |
| CVE-2021-31166In CISA KEVExploitedHTTP Protocol Stack Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 2004 · CVSS 9.8 · 2021-05-11 | 9.8 | 100% | 2021-05-11 |
| CVE-2015-5119In CISA KEVExploitedUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows…Adobe · Flash Player · CVSS 7.8 · 2015-07-08 | 7.8 | 99% | 2015-07-08 |
| CVE-2010-3962In CISA KEVExploitedUse-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token…Microsoft · Internet Explorer · CVSS 8.1 · 2010-11-05 | 8.1 | 97% | 2010-11-05 |
| CVE-2015-0313In CISA KEVExploitedUse-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote att…Adobe · Flash Player · CVSS 7.8 · 2015-02-02 | 7.8 | 95% | 2015-02-02 |
| CVE-2010-0249In CISA KEVExploitedUse-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and S…Microsoft · Internet Explorer · CVSS 8.8 · 2010-01-15 | 8.8 | 92% | 2010-01-15 |
| CVE-2018-4878In CISA KEVExploitedA use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media pl…Adobe · Adobe Flash Player before 28.0.0.161 · CVSS 7.8 · 2018-02-06 | 7.8 | 90% | 2018-02-06 |
| CVE-2018-15982In CISA KEVExploitedFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Flash Player · CVSS 7.8 · 2019-01-18 | 7.8 | 90% | 2019-01-18 |
| CVE-2013-3893In CISA KEVExploitedUse-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via…Microsoft · Internet Explorer · CVSS 8.8 · 2013-09-18 | 8.8 | 88% | 2013-09-18 |
| CVE-2016-9079In CISA KEVExploitedA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users…Mozilla · Firefox · CVSS 7.5 · 2018-06-11 | 7.5 | 87% | 2018-06-11 |
| CVE-2015-5122In CISA KEVExploitedUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through…Adobe · Flash Player · CVSS 7.8 · 2015-07-14 | 7.8 | 87% | 2015-07-14 |
| CVE-2020-0674In CISA KEVExploitedA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabi…Microsoft · Internet Explorer 10 · CVSS 7.5 · 2020-02-11 | 7.5 | 87% | 2020-02-11 |
| CVE-2014-0322In CISA KEVExploitedUse-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and…Microsoft · Internet Explorer · CVSS 8.8 · 2014-02-14 | 8.8 | 85% | 2014-02-14 |
| CVE-2020-3992In CISA KEVExploitedOpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor…VMware · VMware ESXi · CVSS 9.8 · 2020-10-20 | 9.8 | 83% | 2020-10-20 |
| CVE-2014-1776In CISA KEVExploitedUse-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vec…Microsoft · Internet Explorer · CVSS 9.8 · 2014-04-27 | 9.8 | 83% | 2014-04-27 |
| CVE-2010-0806In CISA KEVExploitedUse-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via v…Microsoft · Internet Explorer · CVSS 8.8 · 2010-03-10 | 8.8 | 82% | 2010-03-10 |
| CVE-2021-40449In CISA KEVExploitedWin32k Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2021-10-13 | 7.8 | 82% | 2021-10-13 |
| CVE-2009-4324In CISA KEVExploitedUse-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows rem…Adobe · Acrobat and Reader · CVSS 7.8 · 2009-12-15 | 7.8 | 82% | 2009-12-15 |
| CVE-2021-26411In CISA KEVExploitedInternet Explorer Memory Corruption VulnerabilityMicrosoft · Internet Explorer 11 · CVSS 8.8 · 2021-03-11 | 8.8 | 82% | 2021-03-11 |
| CVE-2012-4969In CISA KEVExploitedUse-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a craft…Microsoft · Internet Explorer · CVSS 8.1 · 2012-09-18 | 8.1 | 80% | 2012-09-18 |
| CVE-2012-4792In CISA KEVExploitedUse-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object…Microsoft · Internet Explorer · CVSS 8.8 · 2012-12-30 | 8.8 | 79% | 2012-12-30 |
| CVE-2017-0261In CISA KEVExploitedMicrosoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office R…Microsoft Corporation · Microsoft Office · CVSS 7.8 · 2017-05-12 | 7.8 | 78% | 2017-05-12 |
| CVE-2013-1347In CISA KEVExploitedMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly…Microsoft · Internet Explorer · CVSS 8.8 · 2013-05-05 | 8.8 | 78% | 2013-05-05 |
| CVE-2013-3897In CISA KEVExploitedUse-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a de…Microsoft · Internet Explorer · CVSS 8.8 · 2013-10-09 | 8.8 | 77% | 2013-10-09 |
| CVE-2019-1429In CISA KEVExploitedA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerabi…Microsoft · Internet Explorer 9 · CVSS 7.5 · 2019-11-12 | 7.5 | 77% | 2019-11-12 |
| CVE-2013-2551In CISA KEVExploitedUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted…Microsoft · Internet Explorer · CVSS 8.8 · 2013-03-11 | 8.8 | 74% | 2013-03-11 |
| CVE-2019-2215In CISA KEVExploitedA use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however explo…Android · Android · CVSS 7.8 · 2019-10-11 | 7.8 | 72% | 2019-10-11 |
| CVE-2019-0211In CISA KEVExploitedIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by…Apache · Apache HTTP Server · CVSS 7.8 · 2019-04-08 | 7.8 | 65% | 2019-04-08 |
| CVE-2019-5786In CISA KEVExploitedObject lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Google · Chrome · CVSS 6.5 · 2019-06-27 | 6.5 | 61% | 2019-06-27 |
| CVE-2023-21608In CISA KEVExploitedAdobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2023-01-18 | 7.8 | 59% | 2023-01-18 |
| CVE-2016-0984In CISA KEVExploitedUse-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.…Adobe · Flash Player and AIR · CVSS 8.8 · 2016-02-10 | 8.8 | 55% | 2016-02-10 |
| CVE-2026-2441In CISA KEVExploitedUse after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security seve…Google · Chrome · CVSS 8.8 · 2026-02-13 | 8.8 | 54% | 2026-02-13 |
| CVE-2021-28550In CISA KEVExploitedAdobe Acrobat Reader use after free vulnerability could lead to arbitrary code executionAdobe · Acrobat Reader · CVSS 9.6 · 2021-09-02 | 9.6 | 52% | 2021-09-02 |
| CVE-2019-13720In CISA KEVExploitedUse after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Google · Chrome · CVSS 8.8 · 2019-11-25 | 8.8 | 49% | 2019-11-25 |
| CVE-2023-29336In CISA KEVExploitedWin32k Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2023-05-09 | 7.8 | 41% | 2023-05-09 |
| CVE-2014-0496In CISA KEVExploitedUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecif…Adobe · Reader and Acrobat · CVSS 8.8 · 2014-01-15 | 8.8 | 40% | 2014-01-15 |
| CVE-2021-37975In CISA KEVExploitedUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Google · Chrome · CVSS 8.8 · 2021-10-08 | 8.8 | 35% | 2021-10-08 |
| CVE-2023-21674In CISA KEVExploitedWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2023-01-10 | 8.8 | 34% | 2023-01-10 |
| CVE-2020-9715In CISA KEVExploitedAdobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Succ…Adobe · Adobe Acrobat and Reader · CVSS 7.8 · 2020-08-19 | 7.8 | 33% | 2020-08-19 |
| CVE-2021-30633In CISA KEVExploitedUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…Google · Chrome · CVSS 9.6 · 2021-10-08 | 9.6 | 33% | 2021-10-08 |
| CVE-2024-38193In CISA KEVExploitedWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 7.8 · 2024-08-13 | 7.8 | 29% | 2024-08-13 |
| CVE-2024-1086In CISA KEVExploitedUse-after-free in Linux kernel's netfilter: nf_tables componentLinux · Kernel · CVSS 7.8 · 2024-01-31 | 7.8 | 28% | 2024-01-31 |
| CVE-2023-36802In CISA KEVExploitedMicrosoft Streaming Service Proxy Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-09-12 | 7.8 | 28% | 2023-09-12 |
| CVE-2023-28205In CISA KEVExploitedA use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventu…Apple · iOS and iPadOS · CVSS 8.8 · 2023-04-10 | 8.8 | 27% | 2023-04-10 |
| CVE-2025-43529In CISA KEVExploitedA use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2,…Apple · Safari · CVSS 8.8 · 2025-12-17 | 8.8 | 26% | 2025-12-17 |
| CVE-2016-7855In CISA KEVExploitedUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via uns…Adobe · Flash Player · CVSS 8.8 · 2016-11-01 | 8.8 | 25% | 2016-11-01 |
| CVE-2022-3038In CISA KEVExploitedUse after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Google · Chrome · CVSS 8.8 · 2022-09-26 | 8.8 | 25% | 2022-09-26 |
| CVE-2024-9680In CISA KEVExploitedAn attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploi…Mozilla · Firefox · CVSS 9.8 · 2024-10-09 | 9.8 | 23% | 2024-10-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.