About CWE-415
MITRE lists these common consequences: Modify Memory, Execute Unauthorized Code or Commands, affecting integrity, confidentiality, availability.
- MITRE name
- Double Free
- Abstraction
- Variant: linked to a certain type of product, typically a specific language or technology
- Status
- Draft
Also Known As
- Double-free
Mitigations
- Choose a language that provides automatic memory management.
- Ensure that each allocation is freed only once. After freeing a chunk, set the pointer to NULL to ensure the pointer cannot be freed again. In complicated error conditions, be sure that clean-up routines respect the state of allocation properly. If the language is object oriented, ensure that object destructors delete each chunk of memory only once.
- Use a static analysis tool to find double free instances.
Detection
MITRE lists these detection methods: Fuzzing (high), Automated Static Analysis (high), Automated Dynamic Analysis (moderate).
CWE-415 in the KEV Catalog
as of 2026-11-11- 6 CISA KEV entries name Double Free (CWE-415) in their CVE record, tied for 41st among the 194 weaknesses named in the catalog.
- CISA added 1 CWE-415 entry to the KEV catalog in 2024, 1 in 2025, and 1 so far in 2026.
- Adobe and Microsoft have the most CWE-415 entries in the CISA KEV catalog (2 each).
CWE-415 Vulnerabilities
7 CVEs| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-33824KEV Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Microsoft | 9.8 | 77.1% | KEV | 2026-04-14 |
| CVE-2025-62215KEV Windows Kernel Elevation of Privilege Vulnerability | Windows Kernel Elevation of Privilege Vulnerability | Microsoft | 7.0 | 4.5% | KEV | 2025-11-11 |
| CVE-2014-0502KEV Adobe Flash Player Double Free Vulnerablity | Adobe Flash Player Double Free Vulnerablity | - | 8.8 | 24.8% | KEV | 2014-02-21 |
| CVE-2018-4990KEV Adobe Acrobat and Reader Double Free Vulnerability | Adobe Acrobat and Reader Double Free Vulnerability | - | 8.8 | 35.8% | KEV | 2018-07-09 |
| CVE-2021-22600KEV Double Free in net/packet/af_packet.c leading to priviledge escalation | Double Free in net/packet/af_packet.c leading to priviledge escalation | Linux Kernel | 6.6 | 6.6% | KEV | 2022-01-26 |
| CVE-2020-9859KEV Apple Multiple Products Code Execution Vulnerability | Apple Multiple Products Code Execution Vulnerability | Apple | 7.8 | 0.8% | KEV | 2020-06-05 |
| CVE-2026-23918 Apache HTTP Server: http2: double free and possible RCE on early reset | Apache HTTP Server: http2: double free and possible RCE on early reset | Apache Software Foundation | 8.8 | 49.7% | 2026-05-04 |
Frequently Asked Questions
What is CWE-415?→
CWE-415 (Double Free) is a MITRE CWE entry. The product calls free() twice on the same memory address.
How many exploited vulnerabilities are classified as CWE-415?→
This database lists 7 CVE records mapped to CWE-415 by their CVE Numbering Authority. 6 of them are in the CISA Known Exploited Vulnerabilities catalog. Examples include CVE-2026-33824, CVE-2025-62215, CVE-2014-0502.
Sources
Weakness description, consequences, and mitigations from the CWE List, © The MITRE Corporation, used under the CWE Terms of Use. CWE mappings come from each CVE record's CNA. Exploited-in-the-wild data from the CISA KEV catalog (CC0). This site is not affiliated with or endorsed by MITRE or CISA.