Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 3,898
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 3,898

Image ID Title
CVE-2026-84333 Use-After-Free in Google Chrome (CVE-2026-84333)
CVE-2026-84350 Use-After-Free in Google Chrome (CVE-2026-84350)
CVE-2026-84349 Use-After-Free in Google Chrome (CVE-2026-84349)
CVE-2026-84347 Use-After-Free in Google Chrome (CVE-2026-84347)
CVE-2026-84324 Use-After-Free in Google Chrome (CVE-2026-84324)
CVE-2026-84641 Use-After-Free in Mozilla Thunderbird (CVE-2026-84641)
CVE-2026-84122 Use-After-Free in Mozilla Firefox (CVE-2026-84122)
CVE-2026-84124 Use-After-Free in Mozilla Firefox (CVE-2026-84124)
CVE-2026-84125 Use-After-Free in Mozilla Firefox (CVE-2026-84125)
CVE-2026-84123 Use-After-Free in Mozilla Firefox (CVE-2026-84123)
CVE-2026-84120 Use-After-Free in Mozilla Firefox (CVE-2026-84120)
CVE-2026-84119 Use-After-Free in Mozilla Firefox (CVE-2026-84119)
CVE-2026-84118 Use-After-Free in Mozilla Firefox (CVE-2026-84118)
CVE-2026-84121 Use-After-Free in Mozilla Firefox (CVE-2026-84121)
CVE-2026-14366 The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a…
CVE-2026-82631 Buffer Overflow in valkey-io valkey (CVE-2026-82631)
CVE-2026-82623 Buffer Overflow in open62541 (CVE-2026-82623)
CVE-2026-82619 Buffer Overflow in Systerel S2OPC (CVE-2026-82619)
CVE-2026-66798 Use-After-Free in Microsoft Edge (CVE-2026-66798)
CVE-2026-42007 An attacker that has valid credentials can use a Sieve script with the editheader extension to...
CVE-2026-19316 Vulnerability in WatchGuard Fireware OS iked process (CVE-2026-19316)
CVE-2026-77358 Use-After-Free in cpp-httplib (CVE-2026-77358)
CVE-2026-81934 Use-After-Free in Redis (CVE-2026-81934)
CVE-2026-26448 Use-After-Free in Stomper (CVE-2026-26448)
CVE-2026-26447 Use-After-Free in Stomper (CVE-2026-26447)
CVE-2026-58093 The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty…
CVE-2026-58090 The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control...
CVE-2026-58091 The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would…
CVE-2026-79290 Use-After-Free in Google Chrome (CVE-2026-79290)
CVE-2026-79275 Use-After-Free in Google Chrome (CVE-2026-79275)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details