Sign in Sign up
JA · EN · FR
SecPulse

Cwe 416

🧬 CWE Related 3,896
slug: cwe-416

Explanation

CWE-416は「メモリを解放した後にそのメモリを使ってしまう」欠陥です。 C/C++のような手動メモリ管理言語で頻発し、攻撃者はこれを利用して任意のコードを実行できることが多いです。 ブラウザのJavaScriptエンジン (V8, JavaScriptCore) でよく見つかり、ブラウザ経由のゼロデイ攻撃の典型的な原因となります。
📌 Example
Pwn2Own (年次ハッキングコンテスト) で、毎年ブラウザに対するUse-After-Free 攻撃が成功し、賞金10万ドル超を獲得する事例が続いています。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 3,898

Image ID Title
CVE-2026-109726 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115...
CVE-2026-109719 Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was...
CVE-2026-109724 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and...
CVE-2026-109718 Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115...
CVE-2026-109717 Use-After-Free in Firefox (CVE-2026-109717)
CVE-2026-109710 Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158,...
CVE-2026-109713 Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158 and...
CVE-2026-109711 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158...
CVE-2026-109707 Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in...
CVE-2026-109705 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the...
CVE-2026-109706 Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158,...
CVE-2026-19938 The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in…
CVE-2026-109268 Use-After-Free in ImageMagick (CVE-2026-109268)
CVE-2026-109254 Use-After-Free in FreeRDP (CVE-2026-109254)
CVE-2026-85965 Use-After-Free in Progress MarkLogic Server (CVE-2026-85965)
CVE-2026-108094 A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description...
CVE-2026-21120 Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to...
CVE-2026-19935 The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a…
CVE-2026-108539 Buffer Overflow in GPAC (CVE-2026-108539)
CVE-2026-108538 Buffer Overflow in GPAC (CVE-2026-108538)
CVE-2026-95702 Vulnerability in Google gVisor (CVE-2026-95702)
CVE-2026-5759 Vulnerability in FalkorDB (CVE-2026-5759)
CVE-2026-14508 Use-After-Free in IBM DataPower Gateway (CVE-2026-14508)
CVE-2026-105824 Use-After-Free in ImageMagick (CVE-2026-105824)
CVE-2026-107209 Vulnerability in ImageMagick (CVE-2026-107209)
CVE-2026-107167 Use-After-Free in m17n-lib (CVE-2026-107167)
CVE-2026-107183 llama.cpp before b11393 contains a use-after-free and double free vulnerability in...
CVE-2026-55330 In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to...
CVE-2026-106423 Use-After-Free in Google Chrome (CVE-2026-106423)
CVE-2026-106421 Use-After-Free in Google Chrome (CVE-2026-106421)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details