CWE-415
CVEs classified under CWE-415, newest first.
192 CVEsRSS
CVE-2026-88812High· 7.8X.Org Server XKB SetGeometry TextDoodad Double Free
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
CVE-2026-116743Medium· 5.5libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat …
CVE-2026-116260High· 7.3libimobiledevice AFC Service afc.c service_receive double free
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be perfo…
CVE-2026-78116Medium· 5.2Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path
The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work_handler() (drivers/sensor/broadcom/afbr_s50/afbr_s50.c), a non-STATUS_OK return from Argus_Evalu…
CVE-2026-94300High· 8.1PoCConcurrent GSS-TSIG messages corrupt memory
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries…
CVE-2026-112036Medium· 4.3PoCArtifex MuPDF Signature Locking pdf-xref.c free_char_list double free
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may b…
CVE-2026-57446Medium· 5.3libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle…
CVE-2026-110599High· 7.1PoCL-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Ann…
CVE-2026-94370High· 8.1A defect in the Qt for MCUs core string handling causes heap memory corruption
A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion t…
CVE-2026-95635High· 7.8Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this i…
CVE-2026-97830High· 7.5Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2026-97812High· 7.0Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811High· 7.8Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97772High· 8.8Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97767High· 8.8Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97749Critical· 9.8Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-96864Critical· 9.8Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-95943High· 7.0Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-88171High· 8.1Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88149High· 7.0Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-88071High· 7.8Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85936High· 8.8Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-85904High· 7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85829High· 7.8Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-84012High· 8.1Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83916High· 7.0Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83842High· 7.0Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83634High· 7.8Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-70158High· 8.8Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-70062High· 8.1Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.