Fallos del tipo CWE-416

6177 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2026-2313HIGHUse after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a craftedEPSS 4.5%CVE-2021-30661HIGHA use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14EPSS 4.5%KEVCVE-2022-34233MEDIUMAdobe Acrobat Reader DC Doc print Use-After-Free Information Disclosure VulnerabilityEPSS 4.5%CVE-2019-18197HIGHIn xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area haEPSS 4.4%CVE-2021-31441HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.4%CVE-2021-31453HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.4%CVE-2021-31451HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.4%CVE-2021-31450HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.4%CVE-2021-28641HIGHAdobe Acrobat Reader Use-After-Free Arbitrary Code Execution VulnerabilityEPSS 4.3%CVE-2022-34220HIGHAcrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 4.3%CVE-2019-6769HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interactiEPSS 4.3%CVE-2021-21035HIGHAcrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 4.3%CVE-2021-21033HIGHAcrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 4.3%CVE-2021-21028HIGHAcrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 4.3%CVE-2021-21021HIGHAcrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionEPSS 4.3%CVE-2024-30284HIGHZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 4.3%CVE-2019-6774HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interactionEPSS 4.2%CVE-2019-6775HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interactionEPSS 4.2%CVE-2024-20683HIGHWin32k Elevation of Privilege VulnerabilityEPSS 4.2%CVE-2019-6734—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.2%