Weaknesses of type CWE-416

4,185 results
CVE-2025-54230HIGHAdobe Framemaker | Use After Free (CWE-416)EPSS 0.2%CVE-2026-14419CRITICALUse after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a craftEPSS 0.2%CVE-2026-14398CRITICALUse after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafEPSS 0.2%CVE-2026-14424CRITICALUse after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via EPSS 0.2%CVE-2026-13035HIGHUse after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a maliciEPSS 0.2%CVE-2024-56541HIGHwifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()EPSS 0.2%CVE-2025-6706MEDIUMRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB ServerEPSS 0.2%CVE-2026-56000CRITICALxorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()EPSS 0.2%CVE-2026-9970HIGHUse after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potenEPSS 0.2%CVE-2026-9888HIGHUse after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer proEPSS 0.2%CVE-2026-9899HIGHUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potenEPSS 0.2%CVE-2026-9894HIGHUse after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentiEPSS 0.2%CVE-2026-32080HIGHWindows WalletService Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-9890HIGHUse after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process EPSS 0.2%CVE-2026-9905HIGHUse after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderEPSS 0.2%CVE-2026-9904HIGHUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a craEPSS 0.2%CVE-2026-11694HIGHUse after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process EPSS 0.2%CVE-2026-9954HIGHUse after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI EPSS 0.2%CVE-2024-54458HIGHscsi: ufs: bsg: Set bsg_queue to NULL after removalEPSS 0.2%CVE-2026-9902HIGHUse after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process EPSS 0.2%