CWE-666 · weakness in Other weaknesses
Operation on Resource in Wrong Phase of Lifetime
4 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.
- idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
- Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path
- Kernel panic in the it82xx2 USB device controller driver via re-initialization of a busy delayable work item
- Bluetooth Classic AVDTP session reuse re-initializes a queued work item, corrupting the system work queue
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP