Skip to main content

Product Directory Enterprise Compliance Pulse AI Analyst Compare Docs

Login Start Free

Loading...

Cloud security intelligence for modern infrastructure.

Stay informed

📬 Product updates & blog posts🛡️ CVE & vendor advisory alerts

Frequency:

Sent from noreply@echelongraph.io · Unsubscribe anytime

Product

Overview
Enterprise
Agents
AI Analyst
Pricing
Compare
vs. Competitors

Resources

CVE Pulse
Vendor Health
Compliance Directory
Newsletter
Documentation
Readiness Calculator
Blog

Security Tools

Surface Scanner
AI Security Index
AI Threat Map
Shadow AI Radar
KEV-Exposure Radar
Exposed Data-Stores
Leaked Credentials
Shadow Engine Map

Company

Design Partners
Changelog
Contact
Responsible Disclosure
Verify a Scan

Legal

Privacy
Terms
Security
DPA

© 2026 EchelonGraph, Inc. All rights reserved.

SOC 2 Type IIISO 27001GDPRHIPAA Ready

Home›CVE Pulse›CWE-416

CWE-416— Use After Free

6,946 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-416page 42 of 139

CVE-2021-31166CRITICALCVSS 9.8EG 9.8⚠ KEV
2021-05-11
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2021-31170HIGHCVSS 7.8EG 7.8
2021-05-11
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-31175HIGHCVSS 7.8EG 7.8
2021-05-11
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31176HIGHCVSS 7.8EG 7.8
2021-05-11
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31177HIGHCVSS 7.8EG 7.8
2021-05-11
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31188HIGHCVSS 7.8EG 5.5
2021-05-11
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-31441HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31450HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31451HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31453HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31455HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31456HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31457HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31458HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31459HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31460HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31470HIGHCVSS 7.8EG 7.8
2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open …
CVE-2021-31497HIGHCVSS 7.8EG 7.8
2021-06-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page …
CVE-2021-31502HIGHCVSS 7.8EG 7.8
2021-06-15
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious…
CVE-2021-31516HIGHCVSS 7.8EG 7.8
2021-06-29
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 (Build ID 88f343c3). User interaction is required to exploit this vulnerability in that the target must visit…
CVE-2021-31804MEDIUMCVSS 5.5EG 5.5
2021-04-26
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document.
CVE-2021-32421HIGHCVSS 7.5EG 7.5
2023-08-22
dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
CVE-2021-32495CRITICALCVSS 10.0EG 10.0
2023-07-07
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
CVE-2021-32589HIGHCVSS 8.1EG 8.1
2024-12-19
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12…
CVE-2021-32606HIGHCVSS 7.8EG 7.8
2021-05-11
In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)
CVE-2021-32613MEDIUMCVSS 5.5EG 5.5
2021-05-14
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
CVE-2021-32781HIGHCVSS 8.6EG 8.6
2021-08-24
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop further processing of request or response dat…
CVE-2021-32944HIGHCVSS 7.8EG 7.8
2021-06-17
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code…
CVE-2021-33033HIGHCVSS 7.8EG 7.8
2021-05-14
The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary valu…
CVE-2021-33034HIGHCVSS 7.8EG 7.8
2021-05-14
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.
CVE-2021-33390CRITICALCVSS 9.8EG 9.8
2023-08-22
dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.
CVE-2021-33391CRITICALCVSS 9.8EG 9.8
2023-02-17
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
CVE-2021-33453HIGHCVSS 7.8EG 7.8
2022-07-26
An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.
CVE-2021-33461MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c.
CVE-2021-33462MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.c.
CVE-2021-33467MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33468MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-3347HIGHCVSS 7.8EG 7.8
2021-01-29
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
CVE-2021-3348HIGHCVSS 7.0EG 7.0
2021-02-01
nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device set…
CVE-2021-33480MEDIUMCVSS 5.5EG 5.5
2021-11-17
An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c.
CVE-2021-33574CRITICALCVSS 9.8EG 9.8
2021-05-25
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller,…
CVE-2021-33640MEDIUMCVSS 6.2EG 9.8
2022-12-19
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-a…
CVE-2021-33641HIGHCVSS 7.8EG 9.8
2023-01-20
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).
CVE-2021-33796CRITICALCVSS 10.0EG 10.0
2023-07-07
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
CVE-2021-3392LOWCVSS 3.2EG 3.2
2021-03-23
A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object 'req' from a pending requests que…
CVE-2021-3403HIGHCVSS 7.8EG 7.8
2021-03-04
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
CVE-2021-34298HIGHCVSS 7.8EG 7.8
2021-07-13
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing fur…
CVE-2021-34301HIGHCVSS 7.8EG 7.8
2021-07-13
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing fur…
CVE-2021-34324HIGHCVSS 7.8EG 7.8
2021-07-13
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further …
CVE-2021-34330HIGHCVSS 7.8EG 7.8
2021-07-13
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further …

← PreviousPage 42 of 139Next →

Map vulnerabilities like CWE-416 to your infrastructure

EchelonGraph correlates every CVE — across CWE-416 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →