CWE-415 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-415 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2018-4990Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.0…36.2%높음8.8● 실제 악용이 확인됨CVE-2014-0502Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before…24.8%높음8.8● 실제 악용이 확인됨CVE-2021-22600A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user th…6.6%높음7.0● 실제 악용이 확인됨CVE-2025-62215Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…6.0%높음7.0● 실제 악용이 확인됨CVE-2026-33824Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.1.6%심각9.8● 실제 악용이 확인됨CVE-2020-9859A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 1…0.8%높음7.8CVE-2026-77493Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a n…1.0%심각9.8CVE-2026-55007Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a netw…0.7%높음8.1
전체 목록
43건
CVE-2026-69322Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a n…0.7%높음8.0
CVE-2026-69337Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.0.7%높음7.1
CVE-2026-77504Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-80080Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-69876Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.0.6%높음8.0
CVE-2026-20135A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could all…0.5%높음8.6
CVE-2026-33630c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-…0.5%높음7.5
CVE-2026-81950Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.0.4%높음7.8
CVE-2026-89078GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.…0.4%심각9.9
CVE-2026-72958Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.0.3%높음8.2
CVE-2026-69725Double free in Windows Hello allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-87585Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to poten…0.3%높음8.8
CVE-2026-85921Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.0.3%높음8.2
CVE-2026-71338Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.0.3%보통6.4
CVE-2026-71351Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privi…0.3%높음7.0
CVE-2026-70562Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70567Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally…0.3%높음7.0
CVE-2026-69309Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-91018lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corru…0.2%높음8.7
CVE-2026-61915An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated c…0.2%보통4.2
CVE-2026-69292Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-71353Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privi…0.2%높음7.0
CVE-2026-69398Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetoo…0.2%높음7.0
CVE-2026-79907Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the…0.2%높음7.8
CVE-2026-84964A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be rea…0.1%높음8.2
CVE-2026-17050The experimental USB host stack allocates a per-device configuration-descriptor buffer, udev->cfg_desc, from t…0.2%보통5.7
CVE-2026-47558NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged us…0.1%높음7.8
CVE-2026-20510In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local…0.1%보통6.7
CVE-2026-23789An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280…0.1%높음7.8
CVE-2026-6794IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management…0.1%높음7.8
CVE-2026-11388Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue af…0.1%보통6.9
CVE-2026-82325A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local aut…0.1%보통6.8
CVE-2026-57842NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32…0.1%높음7.3
CVE-2026-23790An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 16…0.1%보통4.2
CVE-2026-20532In apu, there is a possible application crash due to double free. This could lead to local denial of service w…미평가
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.