Falhas do tipo CWE-416

5.026 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar (ler ou escrever) um bloco de memória que já foi liberado (free, delete). O programa mantém um ponteiro para a memória, mas o sistema operacional pode reatribuir essa região para outro uso, causando corrupção de dados, travamento ou execução de código arbitrário.

Exemplo

Um servidor web aloca memória para armazenar dados de sessão do usuário, depois libera essa memória quando a sessão encerra. Se uma thread continuar tentando acessar essa sessão após a liberação, pode ler dados de outra sessão ou sobrescrever dados críticos de outro processo.

Como mitigar

Sempre anule ponteiros após liberar memória (ptr = NULL), use variáveis de controle para rastrear estado de alocação, implemente gerenciamento automático de memória quando possível (smart pointers em C++), e execute testes com sanitizers (AddressSanitizer, Valgrind) durante desenvolvimento e CI/CD.

CVE-2023-2725HIGHUse after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extensEPSS 24.7%CVE-2024-26230HIGHWindows Telephony Server Elevation of Privilege VulnerabilityEPSS 24.1%CVE-2025-33071HIGHWindows KDC Proxy Service (KPSSVC) Remote Code Execution VulnerabilityEPSS 23.2%CVE-2024-9680CRITICALAn attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had repEPSS 23.2%KEVCVE-2022-0609HIGHUse after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a cEPSS 22.9%KEVCVE-2026-2441HIGHUse after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a craEPSS 22.4%KEVCVE-2021-30560HIGHUse after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a EPSS 21.6%CVE-2009-3671HIGHMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessiEPSS 21.0%CVE-2021-44701HIGHAdobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 20.9%CVE-2024-49122HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 20.7%CVE-2014-8439HIGHAdobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR befEPSS 20.4%KEVCVE-2024-21334CRITICALOpen Management Infrastructure (OMI) Remote Code Execution VulnerabilityEPSS 20.2%CVE-2020-8856HIGHThis vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. User interactEPSS 19.8%CVE-2020-8846HIGHThis vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interactEPSS 19.8%CVE-2020-8845HIGHThis vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interactEPSS 19.5%CVE-2015-5123HIGHUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.30EPSS 18.8%KEVCVE-2016-7892HIGHAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextFieEPSS 18.8%KEVCVE-2020-24430HIGHAcrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code ExecutionEPSS 18.7%CVE-2022-3842HIGHUse after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to pEPSS 18.3%CVE-2022-27799HIGHAdobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 17.7%