CWE-415: Double free
962 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 6 of them as exploited in the wild.
- Published CVEs
- 962
- Last 12 months
- 270
- Critical
- 127
- Known exploited
- 6
Critical 127High 623Medium 197Low 13Not scored 2
CVEs per yearBy the year they were published
- 20152
- 20167
- 201748
- 201871
- 201952
- 202051
- 202176
- 202266
- 202361
- 2024120
- 2025121
- 2026263
Known exploitedNewest addition to KEV first
- CVE-2026-33824
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedCritical9.8 - CVE-2025-62215
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.0 - CVE-2014-0502
Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341…
Product not named
ExploitedHigh8.8 - CVE-2018-4990
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability.…
Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions
ExploitedHigh8.8 - CVE-2021-22600
Double Free in net/packet/af_packet.c leading to priviledge escalation
Linux Kernel · Kernel
ExploitedMedium6.6 - CVE-2020-9859
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5…
Apple · iOS
ExploitedHigh7.8
Newest CVEs
- CVE-2026-68993
A double free vulnerability in NPU driver due to improper pointer management (940)
Samsung Semiconductor · Exynos 1480
Not scored - CVE-2026-68994
A double free vulnerability in NPU driver due to improper pointer management (941)
Samsung Semiconductor · Exynos 1480
Not scored - CVE-2026-121956
FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
FreeRDP · FreeRDP
High8.7 - CVE-2026-92211
Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
Pixar Animation Studio · OpenUSD
High7.8 - CVE-2026-121507
Double Free in µD3TN
D3TN GmbH · µD3TN
Medium5.9 - CVE-2026-58968
In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no…
Google · Android
Critical9.8 - CVE-2026-20582
In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…
MediaTek, Inc. · MediaTek chipset
Medium6.7 - CVE-2026-20573
In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…
MediaTek, Inc. · MediaTek chipset
Medium6.7 - CVE-2026-119338
Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages
tesseract-ocr · tesseract
Medium6.9 - CVE-2026-119116
Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c
AWS · kmstool-enclave
High8.7