Fallos del tipo CWE-416

5042 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2020-24437HIGHAcrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 46.5%CVE-2022-47939CRITICALAn issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SEPSS 46.4%CVE-2024-30080CRITICALMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 43.1%CVE-2023-21674HIGHWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityEPSS 41.0%KEVCVE-2023-29336HIGHWin32k Elevation of Privilege VulnerabilityEPSS 40.9%KEVCVE-2014-0496HIGHUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackersEPSS 40.0%KEVCVE-2021-34850HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaEPSS 38.3%CVE-2025-21760HIGHndisc: extend RCU protection in ndisc_send_skb()EPSS 36.8%CVE-2021-22930—Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory cEPSS 36.5%CVE-2021-37975HIGHUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HEPSS 34.9%KEVCVE-2022-42867HIGHA use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOSEPSS 34.8%CVE-2021-30633CRITICALUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process tEPSS 33.2%KEVCVE-2011-0346HIGHUse-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackeEPSS 31.0%CVE-2022-2998HIGHUse after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in EPSS 30.3%CVE-2024-38193HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 28.5%KEVCVE-2024-1086HIGHUse-after-free in Linux kernel's netfilter: nf_tables componentEPSS 28.1%KEVCVE-2023-36802HIGHMicrosoft Streaming Service Proxy Elevation of Privilege VulnerabilityEPSS 27.9%KEVCVE-2023-28205HIGHA use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOEPSS 27.1%KEVCVE-2012-1539HIGHUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka EPSS 25.4%CVE-2016-7855HIGHUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attaEPSS 25.2%KEV