Variant weakness
Draft
CWE-415: Double Free
Also known as: Double-free
The product calls free() twice on the same memory address.
Last updated
271
Recorded CVEs
With this primary weakness
5
KEVs
In the CISA KEV catalog
High
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
CWE-415 (Double Free) is a variant-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
Real-world CVEs
271 recorded CVEs are caused by CWE-415 (Double Free), including 5 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 43 new CWE-415 CVEs have been recorded so far in 2026 (64 in 2025).