CWE-415
CVEs classified under CWE-415, newest first.
205 CVEsRSS
CVE-2026-20135High· 8.6A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (Do…
A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (Do…
CVE-2026-84561Critical· 9.8A double free issue was addressed with improved memory management
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An ap…
CVE-2026-84558Medium· 5.5A double free issue was addressed with improved memory management
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.
CVE-2026-85921High· 8.2Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-23790Medium· 4.2An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffe…
CVE-2026-23789High· 7.8An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000
An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC en…
CVE-2026-57842High· 7.0NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path
NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to exe…
CVE-2026-61915Medium· 4.2An issue was discovered in Cyrus IMAP before 3.12.4
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two o…
CVE-2026-87585High· 8.8Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-79907High· 7.8Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81950High· 7.8Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-80080High· 8.8Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77504High· 8.8Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77493Critical· 9.8Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-72958High· 8.2Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-71353High· 7.0Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71351High· 7.0Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71338Medium· 6.4Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
CVE-2026-70567High· 7.0Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70562High· 7.0Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69876High· 8.0Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69725High· 7.8Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69398High· 7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69337High· 7.1Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
CVE-2026-69322High· 8.0Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-69309High· 7.0Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69292High· 7.0Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
CVE-2026-55007High· 8.1Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-82325Medium· 6.8A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages
A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages
CVE-2026-20510Medium· 6.7In camera middleware, there is a possible escalation of privilege due to double free
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exp…