Falhas do tipo CWE-416

5.043 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar (ler ou escrever) um bloco de memória que já foi liberado (free, delete). O programa mantém um ponteiro para a memória, mas o sistema operacional pode reatribuir essa região para outro uso, causando corrupção de dados, travamento ou execução de código arbitrário.

Exemplo

Um servidor web aloca memória para armazenar dados de sessão do usuário, depois libera essa memória quando a sessão encerra. Se uma thread continuar tentando acessar essa sessão após a liberação, pode ler dados de outra sessão ou sobrescrever dados críticos de outro processo.

Como mitigar

Sempre anule ponteiros após liberar memória (ptr = NULL), use variáveis de controle para rastrear estado de alocação, implemente gerenciamento automático de memória quando possível (smart pointers em C++), e execute testes com sanitizers (AddressSanitizer, Valgrind) durante desenvolvimento e CI/CD.

CVE-2026-85893HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-62870HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-50474HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69797HIGHMicrosoft Office PowerPoint Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-42985HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69678HIGHMicrosoft Office PowerPoint Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-78507HIGHMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-47653HIGHRemote Desktop Client Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-69632HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-57981HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-5172CRITICALA hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and EPSS 0.8%CVE-2024-30365HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-27284HIGHcassandra-rs non-idiomatic use of iterators leads to use after freeEPSS 0.8%CVE-2024-30367HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-30371HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-27729HIGHWindows Shell Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-12996MEDIUMA use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a deniaEPSS 0.8%CVE-2024-40829HIGHThe issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 1EPSS 0.8%CVE-2022-1679—A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_targetEPSS 0.8%CVE-2022-41218MEDIUMIn drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_deEPSS 0.8%