Fallos del tipo CWE-416

5043 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2026-42985HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-62870HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-78525HIGHMicrosoft Office Outlook Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-78507HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69797HIGHMicrosoft Office PowerPoint Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-62795HIGHWindows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-47653HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69678HIGHMicrosoft Office PowerPoint Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-57981HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-85893HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-69632HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-30365HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-27284HIGHcassandra-rs non-idiomatic use of iterators leads to use after freeEPSS 0.8%CVE-2024-30371HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-30367HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-27729HIGHWindows Shell Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-12996MEDIUMA use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a deniaEPSS 0.8%CVE-2024-40829HIGHThe issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 1EPSS 0.8%CVE-2022-1679—A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_targetEPSS 0.8%CVE-2022-41218MEDIUMIn drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_deEPSS 0.8%