CWE-415 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-415 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-33824Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.77.1%심각9.8● 실제 악용이 확인됨CVE-2018-4990Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.0…35.9%높음8.8● 실제 악용이 확인됨CVE-2014-0502Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before…24.8%높음8.8● 실제 악용이 확인됨CVE-2021-22600A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user th…6.6%높음7.0● 실제 악용이 확인됨CVE-2025-62215Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…4.5%높음7.0● 실제 악용이 확인됨CVE-2020-9859A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 1…0.8%높음7.8CVE-2026-97749Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a netwo…1.0%심각9.8CVE-2026-94300Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who…1.0%높음8.1
전체 목록
93건
CVE-2026-77493Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.1.0%심각9.8
CVE-2026-97830Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a ne…0.9%높음7.5
CVE-2026-70158Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthori…0.9%높음8.8
CVE-2026-83831Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.0.8%높음8.8
CVE-2026-97772Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.7%높음8.8
CVE-2026-55007Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-70062Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-88171Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-69322Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a n…0.7%높음8.0
CVE-2026-84012Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.0.7%높음8.1
CVE-2026-96864Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over …0.6%심각9.8
CVE-2026-69337Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.0.7%높음7.1
CVE-2026-85890Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-77504Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-80080Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-97767Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-69876Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.0.6%높음8.0
CVE-2026-85936Double free in Windows Shell allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-5759A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (…0.6%심각9.3
CVE-2026-20135A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could all…0.5%높음8.6
CVE-2026-33630c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-…0.5%높음7.5
CVE-2026-81950Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.0.4%높음7.8
CVE-2026-57446libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.4%보통5.3
CVE-2026-112457A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27…0.4%높음7.1
CVE-2026-109271ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs…0.4%보통6.3
CVE-2026-89078GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.…0.4%심각9.9
CVE-2026-112036A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the fi…0.3%낮음2.1
CVE-2026-72958Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.0.3%높음8.2
CVE-2026-94370A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes tex…0.3%보통6.5
CVE-2026-69725Double free in Windows Hello allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-109257FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dang…0.3%높음8.2
CVE-2026-85829Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-88071Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83634Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-107209ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.3%보통5.9
CVE-2026-116260A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receiv…0.3%보통5.5
CVE-2026-87585Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to poten…0.3%높음8.8
CVE-2026-104192Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::C…0.3%심각9.6
CVE-2026-85921Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.0.3%높음8.2
CVE-2026-71338Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.0.3%보통6.4
CVE-2026-97812Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally…0.3%높음7.0
CVE-2026-83916Double free in Windows Error Reporting allows an authorized attacker to execute code locally.0.3%높음7.0
CVE-2026-109943FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-…0.3%높음7.1
CVE-2026-83842Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-71351Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privi…0.3%높음7.0
CVE-2026-70562Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-70567Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally…0.3%높음7.0
CVE-2026-69309Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-108132Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.0.3%높음7.0
CVE-2026-110599L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first…0.2%보통6.9
CVE-2026-95943Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges…0.2%높음7.0
CVE-2026-91018lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corru…0.2%높음8.7
CVE-2026-97811Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.0.2%높음7.8
CVE-2026-61915An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated c…0.2%보통4.2
CVE-2026-95635Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in …0.2%높음7.8
CVE-2026-108104Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputS…0.2%보통6.3
CVE-2026-78116The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evalua…0.2%보통5.2
CVE-2026-69292Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-71353Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privi…0.2%높음7.0
CVE-2026-88149Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileg…0.2%높음7.0
CVE-2026-69398Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetoo…0.2%높음7.0
CVE-2026-79907Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the…0.2%높음7.8
CVE-2026-88812A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by…0.2%높음7.8
CVE-2026-119116A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample applicat…0.2%높음8.7
CVE-2026-85904Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device …0.2%높음7.0
CVE-2026-84964A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be rea…0.1%높음8.2
CVE-2026-17050The experimental USB host stack allocates a per-device configuration-descriptor buffer, udev->cfg_desc, from t…0.2%보통5.7
CVE-2026-119338Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp …0.1%보통6.9
CVE-2026-47558NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged us…0.1%높음7.8
CVE-2026-116743libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() tha…0.1%보통6.8
CVE-2026-20510In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local…0.1%보통6.7
CVE-2026-104113A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the dae…0.1%보통5.4
CVE-2026-20532In apu, there is a possible application crash due to double free. This could lead to local denial of service w…0.1%보통6.2
CVE-2026-23789An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280…0.1%높음7.8
CVE-2026-86962A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS …0.1%보통5.5
CVE-2026-6794IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management…0.1%높음7.8
CVE-2026-11388Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue af…0.1%보통6.9
CVE-2026-107886OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class…0.1%낮음2.3
CVE-2026-82325A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local aut…0.1%보통6.8
CVE-2026-57842NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32…0.1%높음7.3
CVE-2026-106175A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all v…0.1%낮음2.3
CVE-2026-23790An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 16…0.1%보통4.2
CVE-2026-95702Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a loc…0.1%높음8.5
CVE-2026-20582In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privi…보통6.7
CVE-2026-20573In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privi…보통6.7
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.