CWE-415 双重释放 类弱点 312 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-415 属于内存管理漏洞，指程序对同一内存地址重复调用释放函数。攻击者通常利用此缺陷触发堆损坏，进而实现任意代码执行或导致服务拒绝。开发者应避免此类问题，需确保指针在释放后立即置空，并引入引用计数或所有权机制来严格管理内存生命周期，防止重复释放。
char* ptr = (char*)malloc (SIZE); ... if (abrt) { free(ptr); } ... free(ptr);#include <stdio.h> #include <unistd.h> #define BUFSIZE1 512 #define BUFSIZE2 ((BUFSIZE1/2) - 8) int main(int argc, char **argv) { char *buf1R1; char *buf2R1; char *buf1R2; buf1R1 = (char *) malloc(BUFSIZE2); buf2R1 = (char *) malloc(BUFSIZE2); free(buf1R1); free(buf2R1); buf1R2 = (char *) malloc(BUFSIZE1); strncpy(buf1R2, argv[1], BUFSIZE1-1); free(buf2R1); free(buf1R2); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-68993 | NPU 驱动 940 版本因指针管理不当引发双重释放漏洞 — Exynos 1480 | - | - | 2026-11-05 |
| CVE-2026-68994 | NPU 驱动双释放漏洞 (941) — Exynos 1480 | - | - | 2026-11-05 |
| CVE-2026-121956 | FreeRDP 3.32.2 之前版本双重释放漏洞 — FreeRDP | 7.5 | High | 2026-11-04 |
| CVE-2026-92211 | Pixar OpenUSD 远程代码执行漏洞 — OpenUSD | - | - | 2026-11-03 |
| CVE-2026-121507 | µD3TN 双重释放漏洞 — µD3TN | 5.9 | Medium | 2026-11-03 |
| CVE-2026-20582 | Android USB 双释放导致内存损坏及本地提权漏洞 — MediaTek chipset | - | - | 2026-11-02 |
| CVE-2026-20573 | Afe 存在双重释放漏洞，可能导致本地权限提升 — MediaTek chipset | - | - | 2026-11-02 |
| CVE-2026-85890 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) | 8.8 | High | 2026-10-29 |
| CVE-2026-83831 | Microsoft Edge 远程代码执行漏洞 — Microsoft Edge (Chromium-based) | 8.8 | High | 2026-10-27 |
| CVE-2026-88812 | X.Org Server 远程代码执行漏洞 — xorg-x11-server | 7.8 | High | 2026-10-27 |
| CVE-2026-116743 | libyal libmsiecf 20260525 双重释放漏洞 — libmsiecf | 5.5 | Medium | 2026-10-26 |
| CVE-2026-116260 | libimobiledevice 远程代码执行漏洞 — libimobiledevice | 7.3 | High | 2026-10-26 |
| CVE-2026-78116 | Broadcom AFBR-S50 驱动双重释放漏洞 — zephyr | 5.2 | Medium | 2026-10-21 |
| CVE-2026-94300 | BIND 并发 GSS-TSIG 内存损坏漏洞 — BIND 9 | 8.1 | High | 2026-10-21 |
| CVE-2026-112036 | MuPDF pdf-xref.c 双重释放漏洞 — MuPDF | 4.3 | Medium | 2026-10-19 |
| CVE-2026-57446 | libIEC61850 服务端双重释放漏洞 — libiec61850 | 5.3 | Medium | 2026-10-16 |
| CVE-2026-110599 | L-SMASH 2.14.5 HEVC/H.264导入器探测双重释放漏洞 — l-smash | 7.1 | High | 2026-10-14 |
| CVE-2026-94370 | Qt for MCUs 内存损坏漏洞（双释放/使用后释放） — Qt_for_MCUs | 6.5 | Medium | 2026-10-14 |
| CVE-2026-95635 | Photoshop Desktop 双重释放漏洞 — Photoshop | 7.8 | High | 2026-10-13 |
| CVE-2026-108132 | Windows Kerberos 权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-97830 | Windows IIS 拒绝服务漏洞 — Windows 11 version 23H2 | 7.5 | High | 2026-10-13 |
| CVE-2026-97812 | Windows Update Orchestrator Service 提权漏洞 — Windows 10 Version 21H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-97811 | Microsoft OpenSSH for Windows 权限提升漏洞 — Windows 10 Version 1809 | 7.8 | High | 2026-10-13 |
| CVE-2026-97772 | Microsoft Office Excel 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise | 8.8 | High | 2026-10-13 |
| CVE-2026-95943 | Connected Devices Platform Service 提权漏洞 — Windows 11 version 23H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-70158 | Windows 路由和远程访问服务远程代码执行漏洞 — Windows 10 Version 1607 | 8.8 | High | 2026-10-13 |
| CVE-2026-88171 | Windows DHCP Server 远程代码执行漏洞 — Windows 10 Version 1607 | 8.1 | High | 2026-10-13 |
| CVE-2026-88149 | Windows WinSock 辅助功能驱动程序提权漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-83634 | Windows BitLocker 提权漏洞 — Windows 11 version 23H2 | 7.8 | High | 2026-10-13 |
| CVE-2026-97767 | Microsoft Office Excel 远程代码执行漏洞 — Microsoft 365 Apps for Enterprise | 8.8 | High | 2026-10-13 |
CWE-415（双重释放） 是常见的弱点类别，本平台收录该类弱点关联的 312 条 CVE 漏洞。