Skip to content

CWE-775 · weakness in Denial of Service

Missing Release of File Descriptor or Handle after Effective Lifetime

9 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process…CVE-2017-8452Elastic · 1.4% likely

    Elastic

  2. A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network conne…CVE-2025-53476OpenPLC · CVSS 5.3 · 0.5% likely

    OpenPLC

  3. Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly…CVE-2024-24444CVSS 7.5 · 0.4% likely
  4. ImageMagick: Unclosed file pointer in magick scriptCVE-2026-106575ImageMagick · CVSS 5.3 · 0.4% likely

    Imagemagick

  5. All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a handle to a kernel object may b…CVE-2016-8819Nvidia Corporation · 0.4% likely

    NVIDIA

  6. FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATECVE-2026-110831FreeRDP · CVSS 4.3 · 0.3% likely

    FreeRDP

  7. Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authorityCVE-2026-78408Red Hat · CVSS 7.9 · 0.2% likely

    Red Hat

  8. TwistedBrush Pro Studio 24.06 Denial of Service via srp FileCVE-2019-25557Pixarra · CVSS 6.2 · 0.2% likely

    Pixarra

  9. OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parseCVE-2026-45287open-telemetry · CVSS 2.1 · 0.2% likely

    OpenTelemetry

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in