Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 3,896
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 3,898

Image ID Title
CVE-2026-70201 Out-of-Bounds Read in Microsoft Windows DHCP Server (CVE-2026-70201)
CVE-2026-70198 Use-After-Free in Microsoft Windows Push Notifications (CVE-2026-70198)
CVE-2026-70195 Vulnerability in Microsoft (CVE-2026-70195)
CVE-2026-70187 Use-After-Free in Microsoft Remote Desktop Gateway Service (CVE-2026-70187)
CVE-2026-70176 Use-After-Free in Microsoft Windows Win32 Kernel Subsystem (CVE-2026-70176)
CVE-2026-70164 Use-After-Free in Microsoft Windows TCP/IP (CVE-2026-70164)
CVE-2026-70168 Use-After-Free in Microsoft (CVE-2026-70168)
CVE-2026-70169 Vulnerability in Microsoft Windows Connected Devices Platform Service (CVE-2026-70169)
CVE-2026-70160 Use-After-Free in Microsoft Windows Kernel (CVE-2026-70160)
CVE-2026-70156 Use-After-Free in Microsoft Windows Search Component (CVE-2026-70156)
CVE-2026-70151 Use-After-Free in Microsoft Windows Direct Composition (CVE-2026-70151)
CVE-2026-70150 Use-After-Free in Microsoft Windows Search Component (CVE-2026-70150)
CVE-2026-70144 Use-After-Free in Microsoft Windows Win32 Kernel Subsystem (CVE-2026-70144)
CVE-2026-70136 Use-After-Free in Microsoft Windows Search Component (CVE-2026-70136)
CVE-2026-70140 Use-After-Free in Microsoft Windows Audio Service (CVE-2026-70140)
CVE-2026-70134 Use-After-Free in Microsoft Windows Event Tracing (CVE-2026-70134)
CVE-2026-70127 Use-After-Free in Microsoft DNS Server (CVE-2026-70127)
CVE-2026-70118 Use-After-Free in Microsoft Windows Audio Service (CVE-2026-70118)
CVE-2026-70115 Use-After-Free in Microsoft Windows Search Component (CVE-2026-70115)
CVE-2026-70102 Use-After-Free in Microsoft Windows Spaceport.sys (CVE-2026-70102)
CVE-2026-70086 Use-After-Free in Microsoft Windows Search Component (CVE-2026-70086)
CVE-2026-70077 Use-After-Free in Microsoft Windows Kernel (CVE-2026-70077)
CVE-2026-70076 Use-After-Free in Microsoft Windows Win32 Kernel Subsystem (CVE-2026-70076)
CVE-2026-70066 Use-After-Free in Microsoft Windows DHCP Server (CVE-2026-70066)
CVE-2026-70067 Use-After-Free in Microsoft Windows Win32 Kernel Subsystem (CVE-2026-70067)
CVE-2026-70056 Use-After-Free in Microsoft Windows Update Service (CVE-2026-70056)
CVE-2026-70045 Use-After-Free in Microsoft Windows Work Folders (CVE-2026-70045)
CVE-2026-70038 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-70038)
CVE-2026-70023 Use-After-Free in Microsoft Windows Hyper-V (CVE-2026-70023)
CVE-2026-70021 Use-After-Free in Microsoft Windows Direct Composition (CVE-2026-70021)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details