CWE-415 · Memory Corruption
Double Free
933CVEs
5exploited
0with a public check
22likely (EPSS 10%+)
SortMost likely exploited
933 CVEs with CWE-415 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-33824In CISA KEVExploitedWindows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 9.8 · 2026-04-14 | 9.8 | 77% | 2026-04-14 |
| CVE-2018-4990In CISA KEVExploitedAdobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation…Adobe · Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier… · CVSS 8.8 · 2018-07-09 | 8.8 | 36% | 2018-07-09 |
| CVE-2014-0502In CISA KEVExploitedDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR…Adobe · Flash Player · CVSS 8.8 · 2014-02-21 | 8.8 | 25% | 2014-02-21 |
| CVE-2021-22600In CISA KEVExploitedDouble Free in net/packet/af_packet.c leading to priviledge escalationLinux Kernel · Kernel · CVSS 6.6 · 2022-01-26 | 6.6 | 6.6% | 2022-01-26 |
| CVE-2020-9859In CISA KEVExploitedA memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.…Apple · iOS · CVSS 7.8 · 2020-06-05 | 7.8 | 0.8% | 2020-06-05 |
| CVE-2023-25136OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unau…Openbsd · Openssh · 2023-02-03 | – | 90% | 2023-02-03 |
| CVE-2003-0545Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a ce…Openssl · Openssl · 2003-10-01 | – | 87% | 2003-10-01 |
| CVE-2018-0101A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to caus…Cisco · Cisco Adaptive Security Appliance · 2018-01-29 | – | 87% | 2018-01-29 |
| CVE-2021-3407A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.Artifex · mupdf · CVSS 7.8 · 2021-02-23 | 7.8 | 50% | 2021-02-23 |
| CVE-2026-23918Apache HTTP Server: http2: double free and possible RCE on early resetApache Software Foundation · Apache HTTP Server · CVSS 8.8 · 2026-05-04 | 8.8 | 50% | 2026-05-04 |
| CVE-2006-5051Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is e…Openbsd · Openssh · 2006-09-27 | – | 46% | 2006-09-27 |
| CVE-2019-11932A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19…koral-- · android-gif-drawable · 2019-10-03 | – | 45% | 2019-10-03 |
| CVE-2018-5379The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes. A su…Quagga · bgpd · CVSS 7.5 · 2018-02-19 | 7.5 | 38% | 2018-02-19 |
| CVE-2017-5334Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafte…Gnu · Gnutls · 2017-03-24 | – | 33% | 2017-03-24 |
| CVE-2022-4450Double free after calling PEM_read_bio_exOpenSSL · OpenSSL · CVSS 7.5 · 2023-02-08 | 7.5 | 29% | 2023-02-08 |
| CVE-2003-1048Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF…Microsoft · Internet Explorer · 2004-07-21 | – | 27% | 2004-07-21 |
| CVE-2003-0015Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as…Cvs · Cvs · 2004-09-01 | – | 24% | 2004-09-01 |
| CVE-2009-1544Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3…Microsoft · Windows Xp · CVSS 8.8 · 2009-08-12 | 8.8 | 21% | 2009-08-12 |
| CVE-2021-21797An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be sto…Gonitro · Nitro Pro · CVSS 8.8 · 2021-10-18 | 8.8 | 15% | 2021-10-18 |
| CVE-2019-8044Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2…Adobe · Adobe Acrobat and Reader · 2019-08-20 | – | 14% | 2019-08-20 |
| CVE-2014-0301Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…Microsoft · Windows 7 · 2014-03-12 | – | 14% | 2014-03-12 |
| CVE-2020-11900The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.Treck · Tcp/ip · 2020-06-17 | – | 13% | 2020-06-17 |
| CVE-2019-1144Microsoft Graphics Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1703 · CVSS 8.8 · 2019-08-14 | 8.8 | 13% | 2019-08-14 |
| CVE-2014-1767Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…Microsoft · Windows 7 · 2014-07-08 | – | 13% | 2014-07-08 |
| CVE-2016-3132Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a cr…Php · Php · 2016-08-07 | – | 12% | 2016-08-07 |
| CVE-2018-12782Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free vulnerability. Successful exploitation…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20 | – | 11% | 2018-07-20 |
| CVE-2005-1689Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.Mit · Kerberos 5 · 2005-07-17 | – | 11% | 2005-07-17 |
| CVE-2007-1216Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the…Mit · Kerberos 5 · 2007-04-06 | – | 9.9% | 2007-04-06 |
| CVE-2002-0059The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free…Zlib · Zlib · 2002-06-25 | – | 9.7% | 2002-06-25 |
| CVE-2016-5772Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attac…Php · Php · 2016-08-07 | – | 9.7% | 2016-08-07 |
| CVE-2016-5768Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.…Php · Php · 2016-08-07 | – | 9.6% | 2016-08-07 |
| CVE-2004-0643Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.Mit · Kerberos 5 · 2004-09-10 | – | 8.9% | 2004-09-10 |
| CVE-2004-0642Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 a…Mit · Kerberos 5 · 2004-09-10 | – | 8.3% | 2004-09-10 |
| CVE-2018-6952A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.Gnu · Patch · 2018-02-13 | – | 8.2% | 2018-02-13 |
| CVE-2019-5481Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.Haxx · curl · CVSS 9.8 · 2019-09-16 | 9.8 | 7.5% | 2019-09-16 |
| CVE-2022-20127In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges n…Google · Android · 2022-06-15 | – | 7.2% | 2022-06-15 |
| CVE-2017-9287servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search…Openldap · Openldap · 2017-05-29 | – | 7.1% | 2017-05-29 |
| CVE-2015-0312Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to…Adobe · Flash Player · 2015-01-28 | – | 7.1% | 2015-01-28 |
| CVE-2004-0772Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.Mit · Kerberos 5 · 2004-09-10 | – | 7.0% | 2004-09-10 |
| CVE-2021-22945When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in…Haxx · https://github.com/curl/curl · CVSS 9.1 · 2021-09-23 | 9.1 | 6.7% | 2021-09-23 |
| CVE-2019-7784Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2…Adobe · Adobe Acrobat and Reader · 2019-05-22 | – | 6.6% | 2019-05-22 |
| CVE-2014-4343Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.…Mit · Kerberos 5 · 2014-08-14 | – | 6.4% | 2014-08-14 |
| CVE-2018-20961In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to c…Linux · Linux Kernel · 2019-08-07 | – | 6.3% | 2019-08-07 |
| CVE-2015-5177Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.Openslp · Openslp · 2017-10-20 | – | 6.3% | 2017-10-20 |
| CVE-2017-6074The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows loc…Linux · Linux Kernel · 2017-02-18 | – | 6.0% | 2017-02-18 |
| CVE-2010-4494Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service…Google · Chrome · 2010-12-07 | – | 5.9% | 2010-12-07 |
| CVE-2022-40304An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case,…Xmlsoft · Libxml2 · CVSS 7.8 · 2022-11-23 | 7.8 | 5.8% | 2022-11-23 |
| CVE-2021-0397In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privile…Google · Android · 2021-03-10 | – | 5.7% | 2021-03-10 |
| CVE-2019-2126In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additiona…Google · Android · 2019-08-20 | – | 5.5% | 2019-08-20 |
| CVE-2017-11462Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.Mit · Kerberos 5 · 2017-09-13 | – | 5.5% | 2017-09-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.