Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 3,898
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 3,898

Image ID Title
CVE-2026-106190 Use-After-Free in Google Chrome (CVE-2026-106190)
CVE-2026-106193 Use-After-Free in Google Chrome (CVE-2026-106193)
CVE-2026-57559 Use-After-Free in Qualcomm Cologne Firmware (CVE-2026-57559)
CVE-2026-57555 Use-After-Free in Qualcomm Cologne Firmware (CVE-2026-57555)
CVE-2026-57537 Use-After-Free in Qualcomm Congo Firmware (CVE-2026-57537)
CVE-2026-57554 Use-After-Free in Qualcomm Snapdragon G1 Gen 2 Gaming Platform Firmware (CVE-2026-57554)
CVE-2026-25274 Use-After-Free in Qualcomm Aqt1000 Firmware (CVE-2026-25274)
CVE-2026-25291 Use-After-Free in Qualcomm Sar1165P Firmware (CVE-2026-25291)
CVE-2026-105249 Buffer Overflow in vgmstream (CVE-2026-105249)
CVE-2026-20542 Use-After-Free in Mediatek Mt2718 Firmware (CVE-2026-20542)
CVE-2026-20536 Use-After-Free in Mediatek Mt6878 Firmware (CVE-2026-20536)
CVE-2026-20537 Use-After-Free in Mediatek Mt6878 Firmware (CVE-2026-20537)
CVE-2026-20531 Use-After-Free in Mediatek Mt8910 Firmware (CVE-2026-20531)
CVE-2026-91737 Use-After-Free in Google Chrome (CVE-2026-91737)
CVE-2026-103630 Use-After-Free in Google Chrome (CVE-2026-103630)
CVE-2026-103622 Use-After-Free in Google Chrome (CVE-2026-103622)
CVE-2026-103623 Use-After-Free in Google Chrome (CVE-2026-103623)
CVE-2026-103624 Use-After-Free in Google Chrome (CVE-2026-103624)
CVE-2026-73637 Use-After-Free in Apache Http Server (CVE-2026-73637)
CVE-2026-57941 Use-After-Free in Apache Http Server (CVE-2026-57941)
CVE-2026-56154 Use-After-Free in Apache Http Server (CVE-2026-56154)
CVE-2026-103679 Use-After-Free in tnef (CVE-2026-103679)
CVE-2026-101276 Use-After-Free in iperf3 (CVE-2026-101276)
CVE-2026-19445 A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if...
CVE-2026-47598 Use-After-Free in NVIDIA GPU Display Driver for Linux (CVE-2026-47598)
CVE-2026-47597 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source...
CVE-2026-47594 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged...
CVE-2026-47588 Use-After-Free in NVIDIA GPU Display Driver for Linux (CVE-2026-47588)
CVE-2026-47587 Use-After-Free in NVIDIA GPU Display Driver for Linux (CVE-2026-47587)
CVE-2026-47589 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details