# Use after free

The program keeps using memory after releasing it. Attackers shape what fills that memory to crash the program or take control of it.

How to fix: Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages.


- [CVE-2025-24085](https://insights.sbomify.com/CVE-2025-24085/): Apple Multiple Products Use-After-Free (critical 10.0, exploited in the wild)
- [CVE-2026-33824](https://insights.sbomify.com/CVE-2026-33824/): Microsoft Internet Key Exchange (IKE) Service Extensions Double Free (critical 9.8, exploited in the wild)
- [CVE-2024-9680](https://insights.sbomify.com/CVE-2024-9680/): Mozilla Firefox Use-After-Free (critical 9.8, exploited in the wild)
- [CVE-2021-31166](https://insights.sbomify.com/CVE-2021-31166/): Microsoft HTTP Protocol Stack Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-3992](https://insights.sbomify.com/CVE-2020-3992/): VMware ESXi OpenSLP Use-After-Free (critical 9.8, exploited in the wild)
- [CVE-2019-0708](https://insights.sbomify.com/CVE-2019-0708/): Microsoft Remote Desktop Services Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-1776](https://insights.sbomify.com/CVE-2014-1776/): Microsoft Internet Explorer Memory Corruption (critical 9.8, exploited in the wild)
- [CVE-2024-4671](https://insights.sbomify.com/CVE-2024-4671/): Google Chromium Visuals Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2022-26486](https://insights.sbomify.com/CVE-2022-26486/): Mozilla Firefox Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-30633](https://insights.sbomify.com/CVE-2021-30633/): Google Chromium Indexed DB API Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-37973](https://insights.sbomify.com/CVE-2021-37973/): Google Chromium Portals Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-28550](https://insights.sbomify.com/CVE-2021-28550/): Adobe Acrobat and Reader Use-After-Free (critical 9.6, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/types/use-after-free/