Fallos del tipo CWE-416

6177 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2023-44371HIGHZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 4.9%CVE-2020-10900HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.9%CVE-2024-12382HIGHUse after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a EPSS 4.9%CVE-2020-10906HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.9%CVE-2020-10907HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.9%CVE-2026-24289HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 4.9%CVE-2020-10899HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.8%CVE-2023-49288HIGHDenial of Service in HTTP Collapsed Forwarding in SquidEPSS 4.8%CVE-2023-29358HIGHWindows GDI Elevation of Privilege VulnerabilityEPSS 4.7%CVE-2021-28631HIGHAdobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution VulnerabilityEPSS 4.7%CVE-2021-28552HIGHAdobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution VulnerabilityEPSS 4.7%CVE-2021-40420HIGHA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDFEPSS 4.7%CVE-2025-50177HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 4.6%CVE-2018-16841MEDIUMSamba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-EPSS 4.6%CVE-2026-46242HIGHeventpoll: fix ep_remove struct eventpoll / struct file UAFEPSS 4.6%CVE-2016-8618MEDIUMThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` muEPSS 4.6%CVE-2018-17679—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interactioEPSS 4.6%CVE-2024-41830HIGHTalos Security Advisory for Adobe (TALOS-2024-2009)EPSS 4.5%CVE-2024-30032HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 4.5%CVE-2018-9951—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 4.5%