Fallos del tipo CWE-416

5043 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2024-49132HIGHWindows Remote Desktop Services Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-21679HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-20854HIGHWindows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-49735HIGHWindows KDC Proxy Service (KPSSVC) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-21366HIGHMicrosoft Access Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-4211MEDIUMMali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsEPSS 1.1%KEVCVE-2022-0523HIGHUse After Free in radareorg/radare2EPSS 1.1%CVE-2024-49142HIGHMicrosoft Access Remote Code Execution VulnerabilityEPSS 1.1%CVE-2022-43639HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaEPSS 1.1%CVE-2022-43637HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaEPSS 1.1%CVE-2022-43638HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaEPSS 1.1%CVE-2026-3593HIGHHeap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationEPSS 1.1%CVE-2025-27745HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-27749HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-4368MEDIUMUse after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a craftEPSS 1.1%CVE-2025-27748HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.1%CVE-2022-3196HIGHUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafteEPSS 1.1%CVE-2023-1194HIGHUse-after-free in parse_lease_state()EPSS 1.1%CVE-2022-3197HIGHUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafteEPSS 1.1%CVE-2021-33480—An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c.EPSS 1.1%