CWE-403 · Denial of Service
Exposure of File Descriptor to Unintended Control Sphere
7CVEs
SortMost likely exploited
7 CVEs with CWE-403 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-21626runc container breakout through process.cwd trickery and leaked fdsopencontainers · runc · CVSS 8.6 · 2024-01-31 | 8.6 | 19% | 2024-01-31 |
| CVE-2024-58280CMSimple 5.15 Remote Command Execution via Extensions ConfigurationCMSimple · CMSimple · CVSS 8.6 · 2025-12-10 | 8.6 | 1.0% | 2025-12-10 |
| CVE-2026-16526Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerabilityRed Hat · Red Hat Enterprise Linux 10 · CVSS 8.8 · 2026-07-30 | 8.8 | 0.6% | 2026-07-30 |
| CVE-2026-33263When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues. If running in high-secur…Open-Xchange GmbH · OX Dovecot Pro · CVSS 4.3 · 2026-08-28 | 4.3 | 0.6% | 2026-08-28 |
| CVE-2025-15114Ksenia Security lares Home Automation 1.6 PIN Exposure VulnerabilityKsenia Security S.p.A. · lares · CVSS 9.8 · 2025-12-30 | 9.8 | 0.5% | 2025-12-30 |
| CVE-2025-3032Leaking file descriptors from the fork serverMozilla · Firefox · CVSS 7.4 · 2025-04-01 | 7.4 | 0.4% | 2025-04-01 |
| CVE-2026-40042Pachno 1.0.6 Wiki TextParser XML External Entity InjectionPachno · Pachno · CVSS 9.8 · 2026-04-13 | 9.8 | 0.4% | 2026-04-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.