目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-416 释放后使用 类漏洞列表 3308

CWE-416 释放后使用 类弱点 3308 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-416 释放后使用是一种内存安全漏洞，指程序在释放内存后仍引用该内存区域。攻击者常利用此缺陷，通过重新分配内存并控制其内容，诱导程序执行恶意代码或读取敏感数据，从而引发远程代码执行或信息泄露。开发者应避免此类风险，确保在指针置空前彻底解除引用，采用智能指针等自动内存管理机制，并严格验证内存生命周期，防止悬空指针操作。

MITRE CWE 官方描述
CWE：CWE-416 Use After Free 英文：产品在内存被释放后重新使用或引用该内存。在此之后，该内存可能会被重新分配并保存到另一个指针中，而原始指针则指向新分配内存中的某个位置。由于内存“属于”操作新指针的代码，因此使用原始指针的任何操作均不再有效。
常见影响 (4)
IntegrityModify Memory
The use of previously freed memory may corrupt valid data, if the memory area in question has been allocated and used properly elsewhere.
AvailabilityDoS: Crash, Exit, or Restart
If chunk consolidation occurs after the use of previously freed data, the process may crash when invalid data is used as chunk information.
ConfidentialityRead Memory
Read operations on freed memory can sometimes leak sensitive information instead of causing a crash
Integrity, Confidentiality, AvailabilityExecute Unauthorized Code or Commands
If malicious data is entered before chunk consolidation can take place, it may be possible to take advantage of a write-what-where primitive to execute arbitrary code. If the newly allocated data happens to hold a class, in C++ for example, various function pointers may be scattered within the heap …
缓解措施 (2)
Architecture and DesignChoose a language that provides automatic memory management.
ImplementationWhen freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.
Effectiveness: Defense in Depth
代码示例 (2)
The following example demonstrates the weakness.
#include <stdio.h> #include <unistd.h> #define BUFSIZER1 512 #define BUFSIZER2 ((BUFSIZER1/2) - 8) int main(int argc, char **argv) { char *buf1R1; char *buf2R1; char *buf2R2; char *buf3R2; buf1R1 = (char *) malloc(BUFSIZER1); buf2R1 = (char *) malloc(BUFSIZER1); free(buf2R1); buf2R2 = (char *) malloc(BUFSIZER2); buf3R2 = (char *) malloc(BUFSIZER2); strncpy(buf2R1, argv[1], BUFSIZER1-1); free(buf1R1); free(buf2R2); free(buf3R2); }
Bad · C
The following code illustrates a use after free error:
char* ptr = (char*)malloc (SIZE); if (err) { abrt = 1; free(ptr); } ... if (abrt) { logError("operation aborted before commit", ptr); }
Bad · C
CVE ID标题CVSS风险等级Published
CVE-2026-56187 Microsoft Windows MIDI Service Module 资源管理错误漏洞 — Windows 11 Version 24H2 7.0 High2026-07-14
CVE-2026-56183 Microsoft Windows MIDI Service Module 资源管理错误漏洞 — Windows 11 Version 24H2 7.0 High2026-07-14
CVE-2026-56173 Microsoft Windows WebView 资源管理错误漏洞 — Windows 10 Version 1809 7.0 High2026-07-14
CVE-2026-50359 Microsoft XML Core Services 资源管理错误漏洞 — Windows 10 Version 1607 7.0 High2026-07-14
CVE-2026-54131 Microsoft Office Excel 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-55128 Microsoft Office Word 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-55032 Microsoft Office Word 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-55018 Microsoft Office 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-50467 Microsoft Office 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-50314 Microsoft Office 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-47642 Microsoft Office Excel 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-47290 Microsoft Office 资源管理错误漏洞 — Microsoft 365 Apps for Enterprise 7.8 High2026-07-14
CVE-2026-54128 Microsoft Windows DHCP Client 资源管理错误漏洞 — Windows 10 Version 1607 8.4 High2026-07-14
CVE-2026-50689 Microsoft Windows Clipboard Server 竞争条件问题漏洞 — Windows 10 Version 1809 7.8 High2026-07-14
CVE-2026-50687 Microsoft Windows Kernel 资源管理错误漏洞 — Windows 11 Version 24H2 8.8 High2026-07-14
CVE-2026-50688 Microsoft Windows Kernel 资源管理错误漏洞 — Windows 10 Version 1607 7.8 High2026-07-14
CVE-2026-50677 Microsoft Windows Media 竞争条件问题漏洞 — Windows 11 Version 24H2 7.8 High2026-07-14
CVE-2026-50674 Microsoft Windows USB Print Driver 资源管理错误漏洞 — Windows 11 Version 24H2 7.0 High2026-07-14
CVE-2026-50672 Microsoft Windows NTFS 竞争条件问题漏洞 — Windows 10 Version 1809 7.0 High2026-07-14
CVE-2026-50666 Microsoft Windows 资源管理错误漏洞 — Windows 10 Version 1607 8.8 High2026-07-14
CVE-2026-50505 Microsoft Message Queuing 资源管理错误漏洞 — Windows 10 Version 1607 7.5 High2026-07-14
CVE-2026-50490 Microsoft Windows Installer 资源管理错误漏洞 — Windows 10 Version 1607 7.0 High2026-07-14
CVE-2026-50500 Microsoft Windows Netlogon 资源管理错误漏洞 — Windows 10 Version 1607 7.5 High2026-07-14
CVE-2026-50487 Microsoft Windows DNS 资源管理错误漏洞 — Windows 11 Version 24H2 8.1 High2026-07-14
CVE-2026-50486 Microsoft Windows Runtime 资源管理错误漏洞 — Windows 10 Version 21H2 7.8 High2026-07-14
CVE-2026-50493 Microsoft Windows Graphics Kernel 资源管理错误漏洞 — Windows 10 Version 1809 7.8 High2026-07-14
CVE-2026-50478 Microsoft Windows Kernel 资源管理错误漏洞 — Windows 10 Version 1809 7.8 High2026-07-14
CVE-2026-50459 Microsoft Windows Kernel 资源管理错误漏洞 — Windows 10 Version 21H2 7.0 High2026-07-14
CVE-2026-50406 Microsoft Windows Backup Engine 资源管理错误漏洞 — Windows 10 Version 21H2 7.0 High2026-07-14
CVE-2026-50476 Microsoft Windows 资源管理错误漏洞 — Windows 10 Version 1607 7.8 High2026-07-14

CWE-416（释放后使用） 是常见的弱点类别，本平台收录该类弱点关联的 3308 条 CVE 漏洞。