Fallos del tipo CWE-416

5043 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2022-37381HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is requEPSS 1.0%CVE-2022-37378HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537. User interaEPSS 1.0%CVE-2023-41675MEDIUMA use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.EPSS 1.0%CVE-2021-38438HIGHFATEK Automation WinProladderEPSS 1.0%CVE-2023-33153MEDIUMMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-52798HIGHwifi: ath11k: fix dfs radar event lockingEPSS 1.0%CVE-2025-27038HIGHUse After Free in GraphicsEPSS 1.0%KEVCVE-2021-40125MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service VulnerabilityEPSS 1.0%CVE-2024-0224HIGHUse after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a cEPSS 1.0%CVE-2023-5855HIGHUse after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specificEPSS 1.0%CVE-2024-4060HIGHUse after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafteEPSS 1.0%CVE-2019-10996HIGHRed Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited whEPSS 1.0%CVE-2024-0225HIGHUse after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a craEPSS 1.0%CVE-2024-40776MEDIUMA use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS EPSS 1.0%CVE-2020-25725MEDIUMIn Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, whichEPSS 1.0%CVE-2024-30062HIGHWindows Standards-Based Storage Management Service Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-45474CRITICALdrachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.EPSS 1.0%CVE-2023-2135HIGHUse after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconEPSS 1.0%CVE-2021-1048HIGHIn ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalationEPSS 1.0%KEVCVE-2023-33128HIGH.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 1.0%