Weakness (CWE)

CWE-415: Double Free

Variant Draft

The product calls free() twice on the same memory address.

How to prevent it (3 mitigations)

Architecture and Design

Choose a language that provides automatic memory management.
Implementation

Ensure that each allocation is freed only once. After freeing a chunk, set the pointer to NULL to ensure the pointer cannot be freed again. In complicated error conditions, be sure that clean-up routines respect the state of allocation properly. If the language is object oriented, ensure that object destructors delete each chunk of memory only once.
Implementation

Use a static analysis tool to find double free instances.

Source: MITRE CWE-415

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

High 8.1

CVE-2026-94300 Public exploit

Concurrent GSS-TSIG messages corrupt memory

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker…

ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

Oct 21, 2026
Medium 5.5

CVE-2026-86962 Public exploit

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 20, 2026
High 7.8

CVE-2026-43494 Public exploit

net/rds: reset op_nents when zerocopy page pin fails

In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znot…

Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

May 21, 2026
High 8.8

CVE-2026-23918 Public exploit EPSS 50%

Apache HTTP Server: http2: double free and possible RCE on early reset

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

May 4, 2026
Critical 9.8

CVE-2026-33824 Exploited Public exploit EPSS 77%

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 14, 2026
KEV Aug 18, 2026
High 7.8

CVE-2026-26179 Public exploit

Windows Kernel Elevation of Privilege Vulnerability

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows

Apr 14, 2026
High 7.0

CVE-2025-62215 Exploited Public exploit

Windows Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2025
KEV Nov 12, 2025
High 7.8

CVE-2023-33137 Public exploit

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft Office 2019 Microsoft Excel 2016 Microsoft Office Online Server

Jun 13, 2023
Unscored —

CVE-2023-25136 Public exploit EPSS 90%

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed …

openssh Debian

Feb 3, 2023
High 7.5

CVE-2019-5797 Public exploit

Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Sep 29, 2022
Medium 6.6

CVE-2021-22600 Exploited Public exploit

Double Free in net/packet/af_packet.c leading to priviledge escalation

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1…

Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu

Jan 26, 2022
KEV Apr 11, 2022
High 8.8

CVE-2021-3492 Public exploit

Ubuntu linux kernel shiftfs file system double free vulnerability

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could u…

Ubuntu Linux kernel linux-raspi2 linux-hwe Linux Ubuntu

Apr 17, 2021
Unscored —

CVE-2020-25637 Public exploit

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting …

libvirt libvirt libvirt Debian Ubuntu Alpine

Oct 6, 2020
High 8.8

CVE-2019-11932 Public exploit EPSS 45%

android-gif-drawable Double Free vulnerability

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arb…

koral-- android-gif-drawable pl.droidsonroids.gif:android-gif-drawable Android Maven

Oct 3, 2019
Unscored —

CVE-2018-0101 Public exploit EPSS 87%

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Soft…

Jan 29, 2018