Cwe 416

🧬 CWE Related 99
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,652

ID Title
CVE-2026-53009 Vulnerability in linux (CVE-2026-53009)
CVE-2026-53011 Use-After-Free in linux (CVE-2026-53011)
CVE-2026-53006 Use-After-Free in linux (CVE-2026-53006)
CVE-2026-53005 Use-After-Free in c (CVE-2026-53005)
CVE-2026-52971 Use-After-Free in linux (CVE-2026-52971)
CVE-2026-52982 Use-After-Free in c (CVE-2026-52982)
CVE-2026-52976 Use-After-Free in linux (CVE-2026-52976)
CVE-2026-52973 Use-After-Free in linux (CVE-2026-52973)
CVE-2026-52950 Use-After-Free in linux (CVE-2026-52950)
CVE-2026-52951 Use-After-Free in linux (CVE-2026-52951)
CVE-2026-52947 Use-After-Free in c (CVE-2026-52947)
CVE-2026-52943 Use-After-Free in privilege-escalation (CVE-2026-52943)
CVE-2026-52924 Use-After-Free in linux (CVE-2026-52924)
CVE-2026-52912 Use-After-Free in linux (CVE-2026-52912)
CVE-2026-56117 Use-After-Free in c (CVE-2026-56117)
CVE-2026-56113 Use-After-Free in dhcpcd-project (CVE-2026-56113)
CVE-2026-56376 Use-After-Free in Magick.NET-Q16-AnyCPU (CVE-2026-56376)
CVE-2026-6653 Use-After-Free in xmlsoft (CVE-2026-6653)
CVE-2026-56412 Use-After-Free in libexpat-project (CVE-2026-56412)
CVE-2026-54902 Use-After-Free in oj (CVE-2026-54902)
CVE-2026-54901 Use-After-Free in oj (CVE-2026-54901)
CVE-2026-54898 Use-After-Free in oj (CVE-2026-54898)
CVE-2026-54897 Use-After-Free in oj (CVE-2026-54897)
CVE-2026-54899 Use-After-Free in oj (CVE-2026-54899)
CVE-2026-12706 Use-After-Free in dos (CVE-2026-12706)
CVE-2026-11941 Use-After-Free in quiche (CVE-2026-11941)
CVE-2026-34192 Use-After-Free in CVE-2026-34192 (CVE-2026-34192)
CVE-2026-41156 Use-After-Free in CVE-2026-41156 (CVE-2026-41156)
CVE-2026-56131 Use-After-Free in libexpat-project (CVE-2026-56131)
CVE-2026-11791 Use-After-Free in dos (CVE-2026-11791)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →