KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Weakness / #4

CWE-416: Use after free in CISA KEV

Use After Free

Catalog
2026.09.23
Rank
#4 of 185
MITRE
CWE-416 definition

Answer 93 KEV entries list CWE-416 (Use after free) as of catalog 2026.09.23, 5.4% of the catalog and rank 4 of 185 weaknesses. The most affected vendor is Microsoft (28).

The software keeps using memory after it has been released, which attackers can fill with their own data.

KEV entries
935.4% of catalog
Vendors
12affected
Ransomware: known
1010.8%
First added
2021-11-03
Latest added
2026-08-11

VVendors

Vendors with CWE-416 KEV entries
VendorEntriesShare
Microsoft2830.1%
Google1617.2%
Apple1212.9%
Adobe1111.8%
Qualcomm55.4%
Mozilla55.4%
Arm55.4%
Android44.3%
Linux33.2%
Samsung22.2%
VMware11.1%
Apache11.1%

TAdditions by year

CWE-416 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 24; 2022: 25; 2023: 16; 2024: 10; 2025: 11; 2026: 7.01020302021: 24 added2420212022: 25 added2520222023: 16 added1620232024: 10 added1020242025: 11 added1120252026: 7 added (year to date)72026
CWE-416 KEV additions by year
YearAdded
202124
202225
202316
202410
202511
20267

PProducts

Products with CWE-416 KEV entries
ProductEntriesShare
Microsoft Windows1314%
Microsoft Internet Explorer88.6%
Apple Multiple Products77.5%
Adobe Flash Player77.5%
Qualcomm Multiple Chipsets44.3%
Mozilla Firefox33.2%
Android Kernel33.2%
Linux Kernel33.2%

EAll entries

KEV entries listing CWE-416
CVEVendorProductAddedRansomware
CVE-2026-68820MicrosoftWindows Ancillary Function Driver for WinSock Unknown
CVE-2010-0249MicrosoftInternet ExplorerUnknown
CVE-2020-9715AdobeAcrobatUnknown
CVE-2026-5281GoogleDawnUnknown
CVE-2023-43000AppleMultiple ProductsUnknown
CVE-2023-41974AppleiOS and iPadOSUnknown
CVE-2026-2441GoogleChromiumUnknown
CVE-2025-43529AppleMultiple ProductsUnknown
CVE-2025-62221MicrosoftWindowsUnknown
CVE-2025-27038QualcommMultiple ChipsetsUnknown
CVE-2025-32709MicrosoftWindowsUnknown
CVE-2025-32701MicrosoftWindowsUnknown
CVE-2025-30400MicrosoftWindowsUnknown
CVE-2025-29824MicrosoftWindowsKnown
CVE-2025-24983MicrosoftWindowsUnknown
CVE-2025-24085AppleMultiple ProductsUnknown
CVE-2025-21335MicrosoftWindowsUnknown
CVE-2025-21334MicrosoftWindowsUnknown
CVE-2024-9680MozillaFirefoxKnown
CVE-2024-43047QualcommMultiple Chipsets Unknown
CVE-2024-38193MicrosoftWindowsUnknown
CVE-2024-38107MicrosoftWindowsUnknown
CVE-2024-36971AndroidKernelUnknown
CVE-2012-4792MicrosoftInternet ExplorerUnknown
CVE-2022-2586LinuxKernelUnknown
CVE-2024-4610ArmMali GPU Kernel DriverUnknown
CVE-2024-1086LinuxKernelKnown
CVE-2024-4671GoogleChromiumUnknown
CVE-2023-33063QualcommMultiple ChipsetsUnknown
CVE-2022-22071QualcommMultiple ChipsetsUnknown
CVE-2023-21608AdobeAcrobat and ReaderUnknown
CVE-2023-4211ArmMali GPU Kernel DriverUnknown
CVE-2023-36802MicrosoftStreaming Service ProxyUnknown
CVE-2021-29256ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2021-25394SamsungMobile DevicesUnknown
CVE-2016-9079MozillaFirefox, Firefox ESR, and ThunderbirdUnknown
CVE-2023-32373AppleMultiple ProductsUnknown
CVE-2023-29336MicrosoftWin32kUnknown
CVE-2019-8526ApplemacOSUnknown
CVE-2023-28205AppleMultiple ProductsUnknown
CVE-2023-0266LinuxKernelUnknown
CVE-2022-38181ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2022-3038GoogleChromium Network ServiceUnknown
CVE-2023-21674MicrosoftWindowsUnknown
CVE-2021-25370SamsungMobile DevicesUnknown
CVE-2019-8605AppleMultiple ProductsUnknown
CVE-2016-0984AdobeFlash Player and AIRUnknown
CVE-2021-1048AndroidKernelUnknown
CVE-2021-0920AndroidKernelUnknown
CVE-2019-5786GoogleChrome BlinkUnknown
CVE-2019-13720GoogleChrome WebAudioUnknown
CVE-2014-0322MicrosoftInternet ExplorerUnknown
CVE-2015-5123AdobeFlash PlayerUnknown
CVE-2015-5122AdobeFlash PlayerUnknown
CVE-2015-0313AdobeFlash PlayerUnknown
CVE-2021-31166MicrosoftHTTP Protocol StackUnknown
CVE-2021-34486MicrosoftWindowsUnknown
CVE-2013-2551MicrosoftInternet ExplorerKnown
CVE-2016-7892AdobeFlash PlayerUnknown
CVE-2022-26486MozillaFirefoxUnknown
CVE-2022-26485MozillaFirefoxUnknown
CVE-2017-0261MicrosoftOfficeUnknown
CVE-2016-7855AdobeFlash PlayerUnknown
CVE-2022-0609GoogleChromium AnimationUnknown
CVE-2018-15982AdobeFlash PlayerKnown
CVE-2022-22620AppleiOS, iPadOS, and macOSUnknown
CVE-2017-0263MicrosoftWin32kUnknown
CVE-2014-1776MicrosoftInternet ExplorerUnknown
CVE-2020-6572GoogleChrome MediaUnknown
CVE-2021-4102GoogleChromium V8Unknown
CVE-2021-40449MicrosoftWindowsKnown
CVE-2021-37975GoogleChromium V8Unknown
CVE-2021-37973GoogleChromium PortalsUnknown
CVE-2021-30858AppleiOS, iPadOS, and macOSUnknown
CVE-2021-30762AppleiOSUnknown
CVE-2021-30661AppleMultiple ProductsUnknown
CVE-2021-30633GoogleChromium Indexed DB APIUnknown
CVE-2021-30554GoogleChromium WebGLUnknown
CVE-2021-28663ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2021-28550AdobeAcrobat and ReaderUnknown
CVE-2021-26411MicrosoftInternet ExplorerKnown
CVE-2021-21206GoogleChromium BlinkUnknown
CVE-2021-21193GoogleChromium BlinkUnknown
CVE-2021-1905QualcommMultiple ChipsetsUnknown
CVE-2020-6819MozillaFirefox and ThunderbirdUnknown
CVE-2020-3992VMwareESXiKnown
CVE-2020-16017GoogleChromeUnknown
CVE-2020-0674MicrosoftInternet ExplorerUnknown
CVE-2019-2215AndroidAndroid KernelUnknown
CVE-2019-1429MicrosoftInternet ExplorerUnknown
CVE-2019-0708MicrosoftRemote Desktop ServicesKnown
CVE-2019-0211ApacheHTTP ServerUnknown
CVE-2018-4878AdobeFlash PlayerKnown

Cite this

93 CISA KEV entries list CWE-416 (Use after free), 5.4% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-416/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API