Falhas do tipo CWE-415

362 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2024-43514HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-23402HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2022-47975HIGHThe DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.EPSS 0.6%CVE-2026-69876HIGHWindows DHCP Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-55132HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-43640HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-45584MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FoEPSS 0.6%CVE-2026-62889HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-66373HIGHRedis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE paylEPSS 0.6%CVE-2025-23322HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a streaEPSS 0.6%CVE-2024-21606HIGHJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crashEPSS 0.6%CVE-2024-21445HIGHWindows USB Print Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-4574MEDIUMCrossbeam-channel: crossbeam-channel vulnerable to double free on dropEPSS 0.5%CVE-2025-21183HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-21182HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-5351MEDIUMLibssh: double free vulnerability in libssh key export functionsEPSS 0.5%CVE-2020-25637—A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about netEPSS 0.5%CVE-2024-12107HIGHDouble Free in µD3TNEPSS 0.5%CVE-2023-45679HIGHAttempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbisEPSS 0.5%CVE-2024-20498HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%