Skip to content
CVE Tracker

CWE-415: Double free

959 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 6 of them as exploited in the wild.

All 959 in the listAtom feed of new CVEsWhat CWE-415 is, at MITRE (opens in a new tab)
Published CVEs
959
Last 12 months
267
Critical
127
Known exploited
6

Critical 127High 622Medium 197Low 13Not scored 0

CVEs per yearBy the year they were published

  1. 201863
  2. 201812
  3. 201957
  4. 201913
  5. 20202
  6. 202595
  7. 202573
  8. 202588
  9. 202597
  10. 2026245
  11. 202689
  12. 202650

Known exploitedNewest addition to KEV first

  • CVE-2026-33824

    Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

    Microsoft · Windows 10 Version 1607

    ExploitedCritical9.8
  • CVE-2025-62215

    Windows Kernel Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1809

    ExploitedHigh7.0
  • CVE-2014-0502

    Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341…

    Product not named

    ExploitedHigh8.8
  • CVE-2018-4990

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability.…

    Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions

    ExploitedHigh8.8
  • CVE-2021-22600

    Double Free in net/packet/af_packet.c leading to priviledge escalation

    Linux Kernel · Kernel

    ExploitedMedium6.6
  • CVE-2020-9859

    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5…

    Apple · iOS

    ExploitedHigh7.8

Newest CVEs

  • CVE-2026-121956

    FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt

    FreeRDP · FreeRDP

    High8.7
  • CVE-2026-92211

    Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability

    Pixar Animation Studio · OpenUSD

    High7.8
  • CVE-2026-121507

    Double Free in µD3TN

    D3TN GmbH · µD3TN

    Medium5.9
  • CVE-2026-58968

    In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no…

    Google · Android

    Critical9.8
  • CVE-2026-20582

    In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…

    MediaTek, Inc. · MediaTek chipset

    Medium6.7
  • CVE-2026-20573

    In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…

    MediaTek, Inc. · MediaTek chipset

    Medium6.7
  • CVE-2026-119338

    Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages

    tesseract-ocr · tesseract

    Medium6.9
  • CVE-2026-119116

    Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c

    AWS · kmstool-enclave

    High8.7
  • CVE-2026-85890

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft · Microsoft Edge (Chromium-based)

    High8.8
  • CVE-2026-83831

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft · Microsoft Edge (Chromium-based)

    High8.8

Vendors it comes up for most

  1. Linux222
  2. Microsoft108
  3. Qualcomm, Inc.57
  4. Apple16
  5. Huawei13
  6. Cisco12
  7. Google11
  8. MediaTek, Inc.11
  9. Red Hat11
  10. Adobe9