KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #4

CWE-416: Use after free in CISA KEV

Use After Free

Catalog
2026.10.30
Rank
#4 of 198
MITRE
CWE-416 definition

Answer 95 KEV entries list CWE-416 (Use after free) as of catalog 2026.10.30, 5.4% of the catalog and rank 4 of 198 weaknesses. The most affected vendor is Microsoft (28).

The software keeps using memory after it has been released, which attackers can fill with their own data.

KEV entries
955.4% of catalog
Vendors
13affected
Ransomware: known
1010.5%
First added
2021-11-03
Latest added
2026-10-26

VVendors

Vendors with CWE-416 KEV entries
VendorEntriesShare
Microsoft2829.5%
Google1616.8%
Apple1212.6%
Adobe1111.6%
Qualcomm55.3%
Mozilla55.3%
Arm55.3%
Android44.2%
Linux33.2%
PHP Group22.1%
Samsung22.1%
VMware11.1%

TAdditions by year

CWE-416 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 24; 2022: 25; 2023: 16; 2024: 10; 2025: 11; 2026: 9.01020302021: 24 added2420212022: 25 added2520222023: 16 added1620232024: 10 added1020242025: 11 added1120252026: 9 added (year to date)92026
CWE-416 KEV additions by year
YearAdded
202124
202225
202316
202410
202511
20269

PProducts

Products with CWE-416 KEV entries
ProductEntriesShare
Microsoft Windows1313.7%
Microsoft Internet Explorer88.4%
Apple Multiple Products77.4%
Adobe Flash Player77.4%
Qualcomm Multiple Chipsets44.2%
Mozilla Firefox33.2%
Android Kernel33.2%
Linux Kernel33.2%

EAll entries

KEV entries listing CWE-416
CVEVendorProductAddedRansomware
CVE-2026-109619PHP GroupPHP NewUnknown
CVE-2026-109618PHP GroupPHP NewUnknown
CVE-2026-68820MicrosoftWindows Ancillary Function Driver for WinSock Unknown
CVE-2010-0249MicrosoftInternet ExplorerUnknown
CVE-2020-9715AdobeAcrobatUnknown
CVE-2026-5281GoogleDawnUnknown
CVE-2023-43000AppleMultiple ProductsUnknown
CVE-2023-41974AppleiOS and iPadOSUnknown
CVE-2026-2441GoogleChromiumUnknown
CVE-2025-43529AppleMultiple ProductsUnknown
CVE-2025-62221MicrosoftWindowsUnknown
CVE-2025-27038QualcommMultiple ChipsetsUnknown
CVE-2025-32709MicrosoftWindowsUnknown
CVE-2025-32701MicrosoftWindowsUnknown
CVE-2025-30400MicrosoftWindowsUnknown
CVE-2025-29824MicrosoftWindowsKnown
CVE-2025-24983MicrosoftWindowsUnknown
CVE-2025-24085AppleMultiple ProductsUnknown
CVE-2025-21335MicrosoftWindowsUnknown
CVE-2025-21334MicrosoftWindowsUnknown
CVE-2024-9680MozillaFirefoxKnown
CVE-2024-43047QualcommMultiple Chipsets Unknown
CVE-2024-38193MicrosoftWindowsUnknown
CVE-2024-38107MicrosoftWindowsUnknown
CVE-2024-36971AndroidKernelUnknown
CVE-2012-4792MicrosoftInternet ExplorerUnknown
CVE-2022-2586LinuxKernelUnknown
CVE-2024-4610ArmMali GPU Kernel DriverUnknown
CVE-2024-1086LinuxKernelKnown
CVE-2024-4671GoogleChromiumUnknown
CVE-2023-33063QualcommMultiple ChipsetsUnknown
CVE-2022-22071QualcommMultiple ChipsetsUnknown
CVE-2023-21608AdobeAcrobat and ReaderUnknown
CVE-2023-4211ArmMali GPU Kernel DriverUnknown
CVE-2023-36802MicrosoftStreaming Service ProxyUnknown
CVE-2021-29256ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2021-25394SamsungMobile DevicesUnknown
CVE-2016-9079MozillaFirefox, Firefox ESR, and ThunderbirdUnknown
CVE-2023-32373AppleMultiple ProductsUnknown
CVE-2023-29336MicrosoftWin32kUnknown
CVE-2019-8526ApplemacOSUnknown
CVE-2023-28205AppleMultiple ProductsUnknown
CVE-2023-0266LinuxKernelUnknown
CVE-2022-38181ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2022-3038GoogleChromium Network ServiceUnknown
CVE-2023-21674MicrosoftWindowsUnknown
CVE-2021-25370SamsungMobile DevicesUnknown
CVE-2019-8605AppleMultiple ProductsUnknown
CVE-2016-0984AdobeFlash Player and AIRUnknown
CVE-2021-1048AndroidKernelUnknown
CVE-2021-0920AndroidKernelUnknown
CVE-2019-5786GoogleChrome BlinkUnknown
CVE-2019-13720GoogleChrome WebAudioUnknown
CVE-2014-0322MicrosoftInternet ExplorerUnknown
CVE-2015-5123AdobeFlash PlayerUnknown
CVE-2015-5122AdobeFlash PlayerUnknown
CVE-2015-0313AdobeFlash PlayerUnknown
CVE-2021-31166MicrosoftHTTP Protocol StackUnknown
CVE-2021-34486MicrosoftWindowsUnknown
CVE-2013-2551MicrosoftInternet ExplorerKnown
CVE-2016-7892AdobeFlash PlayerUnknown
CVE-2022-26486MozillaFirefoxUnknown
CVE-2022-26485MozillaFirefoxUnknown
CVE-2017-0261MicrosoftOfficeUnknown
CVE-2016-7855AdobeFlash PlayerUnknown
CVE-2022-0609GoogleChromium AnimationUnknown
CVE-2018-15982AdobeFlash PlayerKnown
CVE-2022-22620AppleiOS, iPadOS, and macOSUnknown
CVE-2017-0263MicrosoftWin32kUnknown
CVE-2014-1776MicrosoftInternet ExplorerUnknown
CVE-2020-6572GoogleChrome MediaUnknown
CVE-2021-4102GoogleChromium V8Unknown
CVE-2021-40449MicrosoftWindowsKnown
CVE-2021-37975GoogleChromium V8Unknown
CVE-2021-37973GoogleChromium PortalsUnknown
CVE-2021-30858AppleiOS, iPadOS, and macOSUnknown
CVE-2021-30762AppleiOSUnknown
CVE-2021-30661AppleMultiple ProductsUnknown
CVE-2021-30633GoogleChromium Indexed DB APIUnknown
CVE-2021-30554GoogleChromium WebGLUnknown
CVE-2021-28663ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2021-28550AdobeAcrobat and ReaderUnknown
CVE-2021-26411MicrosoftInternet ExplorerKnown
CVE-2021-21206GoogleChromium BlinkUnknown
CVE-2021-21193GoogleChromium BlinkUnknown
CVE-2021-1905QualcommMultiple ChipsetsUnknown
CVE-2020-6819MozillaFirefox and ThunderbirdUnknown
CVE-2020-3992VMwareESXiKnown
CVE-2020-16017GoogleChromeUnknown
CVE-2020-0674MicrosoftInternet ExplorerUnknown
CVE-2019-2215AndroidAndroid KernelUnknown
CVE-2019-1429MicrosoftInternet ExplorerUnknown
CVE-2019-0708MicrosoftRemote Desktop ServicesKnown
CVE-2019-0211ApacheHTTP ServerUnknown
CVE-2018-4878AdobeFlash PlayerKnown

Cite this

95 CISA KEV entries list CWE-416 (Use after free), 5.4% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-416/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings