CWE-416 释放后使用 类弱点 4332 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-416 释放后使用是一种内存安全漏洞，指程序在释放内存后仍引用该内存区域。攻击者常利用此缺陷，通过重新分配内存并控制其内容，诱导程序执行恶意代码或读取敏感数据，从而引发远程代码执行或信息泄露。开发者应避免此类风险，确保在指针置空前彻底解除引用，采用智能指针等自动内存管理机制，并严格验证内存生命周期，防止悬空指针操作。
#include <stdio.h> #include <unistd.h> #define BUFSIZER1 512 #define BUFSIZER2 ((BUFSIZER1/2) - 8) int main(int argc, char **argv) { char *buf1R1; char *buf2R1; char *buf2R2; char *buf3R2; buf1R1 = (char *) malloc(BUFSIZER1); buf2R1 = (char *) malloc(BUFSIZER1); free(buf2R1); buf2R2 = (char *) malloc(BUFSIZER2); buf3R2 = (char *) malloc(BUFSIZER2); strncpy(buf2R1, argv[1], BUFSIZER1-1); free(buf1R1); free(buf2R2); free(buf3R2); }char* ptr = (char*)malloc (SIZE); if (err) { abrt = 1; free(ptr); } ... if (abrt) { logError("operation aborted before commit", ptr); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-83644 | Windows 音频服务权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-83584 | Windows 智能卡提权漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-72969 | Windows 程序兼容性助手服务提权漏洞 — Windows 11 version 23H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-72934 | Windows 程序兼容性助手服务提权漏洞 — Windows 11 version 23H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-69387 | Windows Error Reporting 权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-69743 | Windows Program Compatibility Assistant Service 提权漏洞 — Windows 11 version 23H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-72955 | Windows 应用兼容性缓存权限提升漏洞 — Windows 11 version 23H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-69883 | Windows iSCSI 远程代码执行漏洞 — Windows 10 Version 1607 | 9.8 | Critical | 2026-10-13 |
| CVE-2026-70253 | Windows Win32k 权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70273 | Windows Win32k 提权漏洞 — Windows 11 Version 24H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-70249 | Windows Win32k 提权漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70272 | Windows Installer 权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70252 | 虚拟硬磁盘（VHD）微型端口驱动提升权限漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70274 | Windows绑定筛选驱动程序提权漏洞 — Windows 11 version 23H2 | 7.8 | High | 2026-10-13 |
| CVE-2026-70271 | Windows Win32k 权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70223 | Windows控制台驱动程序权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70195 | Windows Ancillary Function Driver for WinSock 信息泄露漏洞 — Windows 10 Version 1607 | 4.7 | Medium | 2026-10-13 |
| CVE-2026-70198 | Windows推送通知提权漏洞 — Windows 10 Version 1809 | 7.0 | High | 2026-10-13 |
| CVE-2026-70168 | WinSock 辅助功能驱动程序提权漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70150 | Windows 搜索组件提权漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70136 | Windows 搜索组件提权漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70176 | Windows Win32k 权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70156 | Windows 搜索组件权限提升漏洞 — Windows 10 Version 1607 | 7.0 | High | 2026-10-13 |
| CVE-2026-70127 | Windows DNS 远程代码执行漏洞 — Windows 10 Version 1607 | 8.1 | High | 2026-10-13 |
| CVE-2026-70115 | Microsoft Windows 搜索组件提权漏洞 — Windows 11 Version 24H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-70118 | Windows 音频服务提权漏洞 — Windows 11 Version 24H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-70140 | Windows Audio Service 提权漏洞 — Windows 10 Version 1809 | 7.0 | High | 2026-10-13 |
| CVE-2026-70076 | Windows Win32k 权限提升漏洞 — Windows 11 Version 24H2 | 7.0 | High | 2026-10-13 |
| CVE-2026-70077 | Windows内核信息泄露漏洞 — Windows 10 Version 1607 | 4.7 | Medium | 2026-10-13 |
| CVE-2026-70056 | Windows更新服务权限提升漏洞 — Windows 10 Version 1809 | 7.0 | High | 2026-10-13 |
CWE-416（释放后使用） 是常见的弱点类别，本平台收录该类弱点关联的 4332 条 CVE 漏洞。