cwe-416
Safeguard articles tagged "cwe-416" — guides, analysis, and best practices for software supply chain and application security.
95 articles
CVE-2025-62221: Microsoft Windows Use After Free Vulnerability
CVE-2025-62221 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-12-09.
CVE-2025-43529: Apple Multiple Products Use-After-Free WebKit Vulnerability
CVE-2025-43529 affects Apple Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-12-15.
CVE-2026-2441: Google Chromium CSS Use-After-Free Vulnerability
CVE-2026-2441 affects Google Chromium and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-02-17.
CVE-2023-41974: Apple iOS and iPadOS Use-After-Free Vulnerability
CVE-2023-41974 affects Apple iOS and iPadOS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-05.
CVE-2023-43000: Apple Multiple products Use-After-Free Vulnerability
CVE-2023-43000 affects Apple Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-05.
CVE-2026-5281: Google Dawn Use-After-Free Vulnerability
CVE-2026-5281 affects Google Dawn and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-01.
CVE-2020-9715: Adobe Acrobat Use-After-Free Vulnerability
CVE-2020-9715 affects Adobe Acrobat and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-13.
CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability
CVE-2010-0249 affects Microsoft Internet Explorer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-20.
CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
CVE-2026-68820 affects Microsoft Windows Ancillary Function Driver for WinSock and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-11.
Use-after-free vulnerabilities explained
Use-after-free bugs (CWE-416) power some of the worst zero-day exploit chains in browsers and kernels. Here's how they work and what stops them.
Use-After-Free Vulnerability: How It Works and How to Prevent It
A use-after-free vulnerability happens when a program keeps using memory it already released. Here is why it is dangerous, how attackers exploit it, and how to catch it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.