Weakness (CWE)
CWE-415: Double Free
The product calls free() twice on the same memory address.
How to prevent it (3 mitigations)
-
Architecture and Design
Choose a language that provides automatic memory management.
-
Implementation
Ensure that each allocation is freed only once. After freeing a chunk, set the pointer to NULL to ensure the pointer cannot be freed again. In complicated error conditions, be sure that clean-up routines respect the state of allocation properly. If the language is object oriented, ensure that object destructors delete each chunk of memory only once.
-
Implementation
Use a static analysis tool to find double free instances.
Source: MITRE CWE-415
316 results · Clear filters · Feed
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Image Acquisition Remote Code Execution Vulnerability
Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows CredSSP Remote Code Execution Vulnerability
Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Shell Elevation of Privilege Vulnerability
Double free in Windows Shell allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Double free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability
Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Multiple Provider Router Elevation of Privilege Vulnerability
Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploi…
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Setup and Deployment Elevation of Privilege Vulnerability
Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system…
-
High 7.0
Winsock Elevation of Privilege Vulnerability
Double free in Winsock allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Event Collector Service Elevation of Privilege Vulnerability
Double free in Windows Event Collector Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Double free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows TCP/IP Elevation of Privilege Vulnerability
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows DHCP Client Elevation of Privilege Vulnerability
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
-
High 7.0
Windows USB Video Driver Elevation of Privilege Vulnerability
Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.3
A double free vulnerability in NPU driver due to improper pointer management (941)
-
High 7.5
FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the krb5 default realm into a target principal that has an empty realm without taking ownership of it. Unauthenticated remote clients can send a c…
-
High 7.8
Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library …
-
High 7.8
Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c
A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro …
-
High 8.8
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
High 7.8
X.Org Server XKB SetGeometry TextDoodad Double Free
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
-
High 8.8
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
-
High 7.1
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS…
-
High 7.5
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS…
-
High 7.3
libimobiledevice AFC Service afc.c service_receive double free
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The …
-
High 8.1CVE-2026-94300 Public exploit
Concurrent GSS-TSIG messages corrupt memory
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker…