CWE-664 · weakness in Other weaknesses
Improper Control of a Resource Through its Lifetime
57 CVEs · 1 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
Every one of the 57 is a mark on the map. Named now: 1 to 26, most at risk first.
- Unauthenticated remote arbitrary code execution
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
- Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability
- In RubyGem excon, interrupted Persistent Connections May Leak Response Data
- Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.
- A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially…
- OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
- Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability
- Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability
- Cisco UCS Manager Software SSH Sessions Denial of Service Vulnerability
- Temporary disruption of the ADM license service
- A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE…
- Invitation Email is resent as a Reminder after invalidating pending email invites
- The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with softwa…
- espintcp: use sk_msg_free_partial to fix partial send
- Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource through its lifetime vulnerability. An unauthenticated network attacker could potentiall…
- Apache Zeppelin: raft directory listing and file read
- A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
- Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this…
- In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99.
- Cisco Secure Email Gateway Security Hardening Release
- Cisco IOS XR Software Security Hardening Release: September 2026
- netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service
- Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbi…
- Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain
- Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a Resource Through its Lifetime vulnerability in an admin ope…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.