CWE-1050 · Denial of Service
Excessive Platform Resource Consumption within a Loop
15CVEs
SortMost likely exploited
15 CVEs with CWE-1050 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-1390A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKB…Linux · Linux kernel (TIPC kernel module) · CVSS 7.5 · 2023-03-16 | 7.5 | 5.1% | 2023-03-16 |
| CVE-2019-11254Kubernetes API Server denial of service vulnerability from malicious YAML payloadsKubernetes · Kubernetes · CVSS 6.5 · 2020-04-01 | 6.5 | 3.2% | 2020-04-01 |
| CVE-2024-4068Memory Exhaustion in bracesmicromatch · braces · CVSS 7.5 · 2024-05-13 | 7.5 | 1.5% | 2024-05-13 |
| CVE-2021-41039In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of…The Eclipse Foundation · Eclipse Mosquitto · 2021-12-01 | – | 1.4% | 2021-12-01 |
| CVE-2025-48866ModSecurity has possible DoS vulnerability in sanitiseArg actionowasp-modsecurity · ModSecurity · CVSS 7.5 · 2025-06-02 | 7.5 | 0.9% | 2025-06-02 |
| CVE-2025-32907Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range headerRedhat · libsoup · CVSS 5.3 · 2025-04-14 | 5.3 | 0.7% | 2025-04-14 |
| CVE-2026-4634Keycloak: keycloak: denial of service via excessive processing of openid connect scope parametersRed Hat · Red Hat build of Keycloak 26.2 · CVSS 7.5 · 2026-04-02 | 7.5 | 0.6% | 2026-04-02 |
| CVE-2025-47947ModSecurity Has Possible DoS Vulnerabilityowasp-modsecurity · ModSecurity · CVSS 7.5 · 2025-05-21 | 7.5 | 0.6% | 2025-05-21 |
| CVE-2026-81736Remote CPU denial of service through cached SVCB/HTTPS AliasMode treesISC · BIND 9 · CVSS 7.5 · 2026-09-16 | 7.5 | 0.6% | 2026-09-16 |
| CVE-2026-22263Suricata http1: quadratic complexity in headers parsing over multiple packetsOISF · suricata · CVSS 5.3 · 2026-01-27 | 5.3 | 0.4% | 2026-01-27 |
| CVE-2026-85977Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingRed Hat · Red Hat Hardened Images · CVSS 5.3 · 2026-10-16 | 5.3 | 0.4% | 2026-10-16 |
| CVE-2026-22261Suricata eve/alert: http1 xff handling can lead to denial of serviceOISF · suricata · CVSS 3.7 · 2026-01-27 | 3.7 | 0.4% | 2026-01-27 |
| CVE-2025-67419A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's resources via the "GET /images" API. The a…Evershop · Evershop · CVSS 7.5 · 2026-01-05 | 7.5 | 0.3% | 2026-01-05 |
| CVE-2026-52681Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled s…Open-Xchange GmbH · OX Dovecot Pro · CVSS 3.1 · 2026-08-28 | 3.1 | 0.3% | 2026-08-28 |
| CVE-2026-94287Denial of service via unsigned underflow in libXpm's write pathx.org · libXpm · CVSS 5.5 · 2026-09-28 | 5.5 | 0.1% | 2026-09-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.