Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 3,896
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 3,898

Image ID Title
CVE-2017-14834 Use-After-Free in Foxitsoftware (CVE-2017-14834)
CVE-2017-14836 Use-After-Free in Foxitsoftware (CVE-2017-14836)
CVE-2017-16575 Use-After-Free in Foxitsoftware (CVE-2017-16575)
CVE-2017-16576 Use-After-Free in Foxitsoftware (CVE-2017-16576)
CVE-2017-16577 Use-After-Free in Foxitsoftware (CVE-2017-16577)
CVE-2017-16581 Use-After-Free in Foxitsoftware (CVE-2017-16581)
CVE-2017-16583 Use-After-Free in Foxitsoftware (CVE-2017-16583)
CVE-2017-10957 Use-After-Free in Foxitsoftware (CVE-2017-10957)
CVE-2017-10958 Use-After-Free in Foxitsoftware (CVE-2017-10958)
CVE-2017-10959 Use-After-Free in Foxitsoftware (CVE-2017-10959)
CVE-2017-17670 Use-After-Free in Videolan (CVE-2017-17670)
CVE-2017-1635 Use-After-Free in Ibm Tivoli Monitoring (CVE-2017-1635)
CVE-2017-17499 Use-After-Free in Imagemagick (CVE-2017-17499)
CVE-2017-16393 Use-After-Free in Adobe Acrobat (CVE-2017-16393)
CVE-2017-16398 Use-After-Free in Adobe Acrobat (CVE-2017-16398)
CVE-2017-16388 Use-After-Free in Adobe Acrobat (CVE-2017-16388)
CVE-2017-16389 Use-After-Free in Adobe Acrobat (CVE-2017-16389)
CVE-2017-16390 Use-After-Free in Adobe Acrobat (CVE-2017-16390)
CVE-2017-11215 Use-After-Free in Adobe Flash Player (CVE-2017-11215)
CVE-2017-11225 Use-After-Free in Adobe Flash Player (CVE-2017-11225)
CVE-2017-11304 Use-After-Free in Adobe Photoshop (CVE-2017-11304)
CVE-2017-16360 Use-After-Free in Adobe Acrobat (CVE-2017-16360)
CVE-2017-6262 Use-After-Free in Google (CVE-2017-6262)
CVE-2017-6263 Use-After-Free in Google (CVE-2017-6263)
CVE-2017-6276 Use-After-Free in Google (CVE-2017-6276)
CVE-2017-13154 Use-After-Free in Google (CVE-2017-13154)
CVE-2017-11005 Use-After-Free in Google (CVE-2017-11005)
CVE-2017-11006 Use-After-Free in Google (CVE-2017-11006)
CVE-2017-14902 Vulnerability in Google (CVE-2017-14902)
CVE-2017-14904 Use-After-Free in Google (CVE-2017-14904)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details