Skip to content

CWE-404 · weakness in Denial of Service

Improper Resource Shutdown or Release

601 CVEs · 5 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
5
likely to be exploited
4

Every one of the 601 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability."…CVE-2018-8120Microsoft · CVSS 7 · 73% likely

    Microsoft

  2. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability."…CVE-2018-8639Microsoft · CVSS 8.4 · 22% likely

    Microsoft

  3. An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This…CVE-2018-8611Microsoft · CVSS 7.8 · 4.2% likely

    Microsoft

  4. An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Pr…CVE-2018-8406Microsoft · CVSS 7.8 · 3.4% likely

    Microsoft

  5. An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Pr…CVE-2018-8405Microsoft · CVSS 7.8 · 3.4% likely

    Microsoft

  6. ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.CVE-2022-44267CVSS 6.5 · 77% likely
  7. A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012…CVE-2018-8210Microsoft · 25% likely

    Microsoft

  8. Chengdu VEC40G denial of serviceCVE-2023-3206Chengdu · CVSS 5.3 · 19% likely

    Chengdu

  9. A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7, Windo…CVE-2018-8450Microsoft · 16% likely

    Microsoft

  10. TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of serviceCVE-2024-12342TP-Link · CVSS 6.5 · 9.4% likely

    TP-Link

  11. TEM FLEX-1085 reboot denial of serviceCVE-2022-2591TEM · CVSS 7.5 · 9.3% likely

    TEM

  12. INSTAR 2K+/4K Backend IPC Server denial of serviceCVE-2025-8761INSTAR · CVSS 7.5 · 9.1% likely
  13. A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016…CVE-2018-8213Microsoft · 8.4% likely

    Microsoft

  14. Response mix-up with WebSocket concurrent send and closeCVE-2022-25762Apache Software Foundation · 8.4% likely

    Apache

  15. In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were…CVE-2017-5650Apache Software Foundation · 8.3% likely

    Apache

  16. EasyFTP LIST Command denial of serviceCVE-2024-0546Easyftp · CVSS 5.3 · 6.8% likely
  17. In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not close…CVE-2018-19591CVSS 7.5 · 5.5% likely
  18. Tenda CH22 DhcpListClient fromDhcpListClient denial of serviceCVE-2025-15229Tenda · CVSS 5.3 · 4.6% likely

    Tenda

  19. Xlightftpd Xlight FTP Server Login denial of serviceCVE-2024-0737Xlightftpd · CVSS 5.3 · 4.2% likely
  20. The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of servi…CVE-2015-34154.1% likely
  21. An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerabilit…CVE-2018-8410Microsoft · 4.0% likely

    Microsoft

  22. An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This…CVE-2018-8308Microsoft · 3.9% likely

    Microsoft

  23. Apache Tomcat: h2 DoS - Made You ResetCVE-2025-48989Apache Software Foundation · CVSS 7.5 · 3.8% likely

    Apache

  24. Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection aff…CVE-2018-8836WAGO · 3.7% likely

    WAGO

  25. ProSSHD denial of serviceCVE-2024-0725Prosshd · CVSS 5.3 · 3.6% likely
  26. freeSSHd denial of serviceCVE-2024-0723Freesshd · CVSS 5.3 · 3.6% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in