Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 99
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 20125 Cwe 78120 Cwe 787105 Cwe 2296 Cwe 11990 Cwe 9484 Cwe 50270 Cwe 7966 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 2,652

ID Title
CVE-2022-21540 Use-After-Free in java (CVE-2022-21540)
CVE-2026-43232 Use-After-Free in linux (CVE-2026-43232)
CVE-2026-43236 Use-After-Free in c (CVE-2026-43236)
CVE-2026-43237 Use-After-Free in c (CVE-2026-43237)
CVE-2026-43203 Use-After-Free in linux (CVE-2026-43203)
CVE-2026-43138 Use-After-Free in linux (CVE-2026-43138)
CVE-2026-43111 Use-After-Free in linux (CVE-2026-43111)
CVE-2026-43084 Use-After-Free in c (CVE-2026-43084)
CVE-2026-43076 Use-After-Free in linux (CVE-2026-43076)
CVE-2026-23631 Use-After-Free in redis (CVE-2026-23631)
CVE-2026-23479 Use-After-Free in redis (CVE-2026-23479)
CVE-2026-24082 Use-After-Free in qualcomm (CVE-2026-24082)
CVE-2026-22165 Use-After-Free in imaginationtech (CVE-2026-22165)
CVE-2026-22166 Use-After-Free in imaginationtech (CVE-2026-22166)
CVE-2026-31769 Use-After-Free in linux (CVE-2026-31769)
CVE-2026-43027 Use-After-Free in linux (CVE-2026-43027)
CVE-2026-43019 Use-After-Free in linux (CVE-2026-43019)
CVE-2026-43018 Use-After-Free in linux (CVE-2026-43018)
CVE-2026-31758 Use-After-Free in linux (CVE-2026-31758)
CVE-2026-31731 Use-After-Free in linux (CVE-2026-31731)
CVE-2026-31715 Use-After-Free in linux (CVE-2026-31715)
CVE-2026-31718 Use-After-Free in linux (CVE-2026-31718)
CVE-2026-31702 Use-After-Free in c (CVE-2026-31702)
CVE-2026-31703 Use-After-Free in linux (CVE-2026-31703)
CVE-2026-7111 Use-After-Free in hmbrand (CVE-2026-7111)
CVE-2026-7357 Use-After-Free in google (CVE-2026-7357)
CVE-2026-7356 Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7358 Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7359 Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch...
CVE-2026-7361 Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →