Skip to content

CWE-664 · weakness in Other weaknesses

Improper Control of a Resource Through its Lifetime

57 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1

Every one of the 57 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Unauthenticated remote arbitrary code executionCVE-2022-27518Citrix · CVSS 9.8 · 6.9% likely

    Citrix (NetScaler)APT5Ke3chang

  2. net: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Linux · CVSS 8.8 · 2.0% likelycovered by CyberSIXT

    Linux

  3. Cisco MDS 9000 Series Multilayer Switches Denial of Service VulnerabilityCVE-2020-3175Cisco · CVSS 8.6 · 2.0% likely

    Cisco

  4. In RubyGem excon, interrupted Persistent Connections May Leak Response DataCVE-2019-16779excon · CVSS 5.8 · 1.7% likely
  5. Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.CVE-2019-5816Google · 1.6% likely

    Google

  6. A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially…CVE-2024-45383Microsoft · CVSS 5 · 1.5% likely

    Microsoft

  7. OpenZeppelin Contracts for Cairo account cannot process transactions on GoerliCVE-2022-31153OpenZeppelin · CVSS 6.5 · 1.5% likely

    OpenZeppelin

  8. Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service VulnerabilityCVE-2022-20748Cisco · CVSS 5.3 · 1.3% likely

    Cisco

  9. Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service VulnerabilityCVE-2022-20856Cisco · CVSS 8.6 · 1.3% likely

    Cisco

  10. Cisco UCS Manager Software SSH Sessions Denial of Service VulnerabilityCVE-2021-1592Cisco · CVSS 4.3 · 1.0% likely

    Cisco

  11. Temporary disruption of the ADM license serviceCVE-2022-27512Citrix · 1.0% likely

    Citrix (NetScaler)

  12. A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE…CVE-2022-46144Siemens · CVSS 6.5 · 0.9% likely

    Siemens

  13. Invitation Email is resent as a Reminder after invalidating pending email invitesCVE-2022-1385Mattermost · CVSS 3.7 · 0.8% likely

    Mattermost

  14. The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with softwa…CVE-2016-8763P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and ea… · 0.8% likely
  15. espintcp: use sk_msg_free_partial to fix partial sendCVE-2026-72041Linux · CVSS 9.8 · 0.7% likely

    Linux

  16. Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource through its lifetime vulnerability. An unauthenticated network attacker could potentiall…CVE-2023-44288Dell · CVSS 7.5 · 0.7% likely

    Dell

  17. Apache Zeppelin: raft directory listing and file readCVE-2024-41169Apache Software Foundation · CVSS 7.5 · 0.7% likely

    Apache

  18. A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.CVE-2022-32846Apple · CVSS 7.5 · 0.6% likely

    Apple

  19. Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this…CVE-2023-25942Dell · CVSS 6.5 · 0.6% likely

    Dell

  20. In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99.CVE-2022-28287Mozilla · CVSS 6.5 · 0.6% likely

    Mozilla

  21. Cisco Secure Email Gateway Security Hardening ReleaseCVE-2026-20353Cisco · CVSS 9.8 · 0.5% likelycovered by CyberSIXT

    Cisco1 article

  22. Cisco IOS XR Software Security Hardening Release: September 2026CVE-2026-20274Cisco · CVSS 9.8 · 0.5% likelycovered by CyberSIXT

    Cisco1 article

  23. netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of ServiceCVE-2026-54251netty · CVSS 8.7 · 0.5% likely

    The Netty project

  24. Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbi…CVE-2026-8517Google · CVSS 8.8 · 0.5% likely

    Google

  25. Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainCVE-2022-22249Juniper Networks · CVSS 6.5 · 0.5% likely

    Juniper Networks

  26. Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a Resource Through its Lifetime vulnerability in an admin ope…CVE-2024-37139Dell · CVSS 6.5 · 0.5% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in