Use After Free

CWE-416

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory belongs to the code that operates on the new pointer.

We track 4,465 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.3. 109 have been exploited in real attacks.

How this weakness is prevented

Architecture and Design: Choose a language that provides automatic memory management.
Implementation: When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Latest Use After Free vulnerabilities

7.8 High severity
SketchUp Viewer: Use After Free
CVE-2023-50192May 3, 2024Trimble
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this
7.8 High severity
SketchUp Viewer: Use After Free
CVE-2023-50191May 3, 2024Trimble
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this
7.8 High severity
SketchUp Viewer: Use After Free
CVE-2023-50189May 3, 2024Trimble
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this
8.8 High severity
GStreamer: Use After Free
CVE-2023-44446May 3, 2024GStreamerEPSS 1.96%
GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability
7.8 High severity
Power PDF: Use After Free
CVE-2023-44436May 3, 2024Kofax
Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in th
7.8 High severity
Power PDF: Use After Free
CVE-2023-44435May 3, 2024Kofax
Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in th
7.8 High severity
View: Use After Free
CVE-2023-44430May 3, 2024Bentley
Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42108May 3, 2024PDF-XChange
PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
Cobalt: Use After Free
CVE-2023-42104May 3, 2024Ashlar-Vellum
Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner
7.8 High severity
Cobalt: Use After Free
CVE-2023-42103May 3, 2024Ashlar-Vellum
Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulner
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42097May 3, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42096May 3, 2024Foxit
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42094May 3, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42092May 3, 2024Foxit
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42091May 3, 2024Foxit
Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42089May 3, 2024Foxit
Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42086May 3, 2024PDF-XChange
PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42082May 3, 2024PDF-XChange
PDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42080May 3, 2024PDF-XChange
PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42075May 3, 2024PDF-XChange
PDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42059May 3, 2024PDF-XChange
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42041May 3, 2024PDF-XChange
PDF-XChange Editor Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability i
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-42040May 3, 2024PDF-XChange
PDF-XChange Editor mailForm Use-After-Free Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that th
7.8 High severity
Cinema 4D: Use After Free
CVE-2023-40491May 3, 2024Maxon
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability i
7.8 High severity
Cinema 4D: Use After Free
CVE-2023-40489May 3, 2024Maxon
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability i
7.8 High severity
Cinema 4D: Use After Free
CVE-2023-40488May 3, 2024Maxon
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability i
7.8 High severity
Cinema 4D: Use After Free
CVE-2023-40487May 3, 2024Maxon
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability i
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-39491May 3, 2024PDF-XChange
PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-39488May 3, 2024PDF-XChange
PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38117May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38114May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38112May 3, 2024Foxit
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38111May 3, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38107May 3, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
9.1 Critical severity
UaGateway: Use After Free
CVE-2023-32174May 3, 2024Unified AutomationEPSS 1.85%
Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to expl
8.8 High severity
DICOM Viewer Pro: Use After Free
CVE-2023-32134May 3, 2024Sante
Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this v
7.8 High severity
PDF Reader: Use After Free
CVE-2023-27366May 3, 2024Foxit
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF-XChange Editor: Use After Free
CVE-2023-27348May 3, 2024PDF-XChange
PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF Reader: Use After Free
CVE-2023-27331May 3, 2024FoxitEPSS 3.92%
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-27330May 3, 2024FoxitEPSS 3.92%
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i