Double Free

Every one of the 933 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityCVE-2026-33824Microsoft · CVSS 9.8 · 77% likelycovered by CyberSIXT

   Microsoft8 articles

2. Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation…CVE-2018-4990Adobe · CVSS 8.8 · 36% likely

   Adobe

3. Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR…CVE-2014-0502Adobe · CVSS 8.8 · 25% likely

   Adobe

4. Double Free in net/packet/af_packet.c leading to priviledge escalationCVE-2021-22600Linux Kernel · CVSS 6.6 · 6.6% likely

   Linux Kernel

5. A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.…CVE-2020-9859Apple · CVSS 7.8 · 0.8% likely

   Apple

6. OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unau…CVE-2023-2513690% likely
7. Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a ce…CVE-2003-054587% likely
8. A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to caus…CVE-2018-0101Cisco Adaptive Security Appliance · 87% likely
9. A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.CVE-2021-3407mupdf · CVSS 7.8 · 50% likely
10. Apache HTTP Server: http2: double free and possible RCE on early resetCVE-2026-23918Apache Software Foundation · CVSS 8.8 · 50% likelycovered by CyberSIXT

    Apache

11. Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is e…CVE-2006-505146% likely
12. A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19…CVE-2019-11932koral-- · 45% likely
13. The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A su…CVE-2018-5379Quagga · CVSS 7.5 · 38% likely

    Quagga

14. Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafte…CVE-2017-533433% likely
15. Double free after calling PEM_read_bio_exCVE-2022-4450OpenSSL · CVSS 7.5 · 29% likely

    OpenSSL

16. Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF…CVE-2003-104827% likely
17. Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as…CVE-2003-001524% likely
18. Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3…CVE-2009-1544CVSS 8.8 · 21% likely
19. An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be sto…CVE-2021-21797Nitro Pro · CVSS 8.8 · 15% likely
20. Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2…CVE-2019-8044Adobe · 14% likely

    Adobe

21. Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…CVE-2014-030114% likely
22. The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.CVE-2020-1190013% likely
23. Microsoft Graphics Remote Code Execution VulnerabilityCVE-2019-1144Microsoft · CVSS 8.8 · 13% likely

    Microsoft

24. Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…CVE-2014-176713% likely
25. Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a cr…CVE-2016-313212% likely
26. Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free vulnerability. Successful exploitation…CVE-2018-12782Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 11% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.