CWE-404 · Denial of Service
Improper Resource Shutdown or Release
601CVEs
5exploited
0with a public check
5likely (EPSS 10%+)
SortMost likely exploited
601 CVEs with CWE-404 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-8120In CISA KEVExploitedAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability."…Microsoft · Windows Server 2008 · CVSS 7 · 2018-05-09 | 7.0 | 73% | 2018-05-09 |
| CVE-2018-8639In CISA KEVExploitedAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability."…Microsoft · Windows 7 · CVSS 8.4 · 2018-12-12 | 8.4 | 22% | 2018-12-12 |
| CVE-2018-8611In CISA KEVExploitedAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This…Microsoft · Windows 7 · CVSS 7.8 · 2018-12-12 | 7.8 | 4.2% | 2018-12-12 |
| CVE-2018-8406In CISA KEVExploitedAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Pr…Microsoft · Windows Server 2016 · CVSS 7.8 · 2018-08-15 | 7.8 | 3.4% | 2018-08-15 |
| CVE-2018-8405In CISA KEVExploitedAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Pr…Microsoft · Windows Server 2012 R2 · CVSS 7.8 · 2018-08-15 | 7.8 | 3.4% | 2018-08-15 |
| CVE-2022-44267ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.Imagemagick · Imagemagick · CVSS 6.5 · 2023-02-06 | 6.5 | 77% | 2023-02-06 |
| CVE-2018-8210A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012…Microsoft · Windows Server 2012 R2 · 2018-06-14 | – | 25% | 2018-06-14 |
| CVE-2023-3206Chengdu VEC40G denial of serviceChengdu · VEC40G · CVSS 5.3 · 2023-06-12 | 5.3 | 19% | 2023-06-12 |
| CVE-2018-8450A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7, Windo…Microsoft · Windows 7 · 2018-11-14 | – | 16% | 2018-11-14 |
| CVE-2025-8761INSTAR 2K+/4K Backend IPC Server denial of serviceINSTAR · 2K+ · CVSS 7.5 · 2025-08-13 | 7.5 | 11% | 2025-08-13 |
| CVE-2024-12342TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of serviceTP-Link · VN020 F3v(T) · CVSS 6.5 · 2024-12-08 | 6.5 | 9.4% | 2024-12-08 |
| CVE-2022-2591TEM FLEX-1085 reboot denial of serviceTEM · FLEX-1085 · CVSS 7.5 · 2022-07-31 | 7.5 | 9.3% | 2022-07-31 |
| CVE-2018-8213A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016…Microsoft · Windows Server 2016 · 2018-06-14 | – | 8.4% | 2018-06-14 |
| CVE-2022-25762Response mix-up with WebSocket concurrent send and closeApache Software Foundation · Apache Tomcat · 2022-05-13 | – | 8.4% | 2022-05-13 |
| CVE-2017-5650In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were…Apache Software Foundation · Apache Tomcat · 2017-04-17 | – | 8.3% | 2017-04-17 |
| CVE-2024-0546EasyFTP LIST Command denial of serviceEasyftp · EasyFTP · CVSS 5.3 · 2024-01-15 | 5.3 | 6.8% | 2024-01-15 |
| CVE-2018-19591In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not close…Gnu · Glibc · CVSS 7.5 · 2018-12-04 | 7.5 | 5.5% | 2018-12-04 |
| CVE-2025-15229Tenda CH22 DhcpListClient fromDhcpListClient denial of serviceTenda · CH22 · CVSS 5.3 · 2025-12-30 | 5.3 | 4.6% | 2025-12-30 |
| CVE-2024-0737Xlightftpd Xlight FTP Server Login denial of serviceXlightftpd · Xlight FTP Server · CVSS 5.3 · 2024-01-19 | 5.3 | 4.2% | 2024-01-19 |
| CVE-2015-3415The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of servi…Sqlite · Sqlite · 2015-04-24 | – | 4.1% | 2015-04-24 |
| CVE-2018-8410An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerabilit…Microsoft · Windows 7 · 2018-09-13 | – | 4.0% | 2018-09-13 |
| CVE-2018-8308An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This…Microsoft · Windows 7 · 2018-07-11 | – | 3.9% | 2018-07-11 |
| CVE-2025-48989Apache Tomcat: h2 DoS - Made You ResetApache Software Foundation · Apache Tomcat · CVSS 7.5 · 2025-08-13 | 7.5 | 3.8% | 2025-08-13 |
| CVE-2018-8836Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection aff…WAGO · WAGO 750 Series · 2018-04-03 | – | 3.7% | 2018-04-03 |
| CVE-2024-0725ProSSHD denial of serviceProsshd · ProSSHD · CVSS 5.3 · 2024-01-19 | 5.3 | 3.6% | 2024-01-19 |
| CVE-2024-0723freeSSHd denial of serviceFreesshd · freeSSHd · CVSS 5.3 · 2024-01-19 | 5.3 | 3.6% | 2024-01-19 |
| CVE-2025-8671CVE-2025-8671SUSE Linux · Enterprise Module for Development Tools · CVSS 7.5 · 2025-08-13 | 7.5 | 3.6% | 2025-08-13 |
| CVE-2024-22019A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (Do…NodeJS · Node · CVSS 7.5 · 2024-02-20 | 7.5 | 3.2% | 2024-02-20 |
| CVE-2023-45802Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTApache Software Foundation · Apache HTTP Server · 2023-10-23 | – | 3.2% | 2023-10-23 |
| CVE-2022-3594Linux Kernel BPF r8152.c intr_callback logging of excessive dataLinux · Kernel · CVSS 5.3 · 2022-10-18 | 5.3 | 3.1% | 2022-10-18 |
| CVE-2013-4133kde-workspace before 4.10.5 has a memory leak in plasma desktopkde-workspace · kde-workspace · 2019-12-10 | – | 2.8% | 2019-12-10 |
| CVE-2022-0396DoS from specifically crafted TCP packetsISC · BIND · CVSS 5.3 · 2022-03-23 | 5.3 | 2.7% | 2022-03-23 |
| CVE-2024-39721An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be…Ollama · Ollama · CVSS 7.5 · 2024-10-31 | 7.5 | 2.7% | 2024-10-31 |
| CVE-2021-26906An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certifie…Digium · Asterisk · 2021-02-18 | – | 2.6% | 2021-02-18 |
| CVE-2019-19886Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsiv…Owasp · Modsecurity · 2020-01-21 | – | 2.5% | 2020-01-21 |
| CVE-2020-4420IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang i…IBM · DB2 for Linux- UNIX and Windows · CVSS 7.5 · 2020-07-01 | 7.5 | 2.4% | 2020-07-01 |
| CVE-2018-25021The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing…Toktok · Toxcore · 2021-12-13 | – | 2.3% | 2021-12-13 |
| CVE-2017-7472The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_se…Linux · Linux kernel before 4.10.13 · 2017-05-11 | – | 2.3% | 2017-05-11 |
| CVE-2022-2191In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code path…The Eclipse Foundation · Eclipse Jetty · CVSS 7.5 · 2022-07-07 | 7.5 | 2.2% | 2022-07-07 |
| CVE-2020-8619A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferISC · BIND9 · CVSS 4.9 · 2020-06-17 | 4.9 | 2.1% | 2020-06-17 |
| CVE-2018-8401An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Pr…Microsoft · Windows Server 2016 · 2018-08-15 | – | 2.1% | 2018-08-15 |
| CVE-2018-8400An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Pr…Microsoft · Windows 10 Servers · 2018-08-15 | – | 2.1% | 2018-08-15 |
| CVE-2019-1708Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2019-05-03 | 8.6 | 2.1% | 2019-05-03 |
| CVE-2019-1705Cisco Adaptive Security Appliance Software VPN Denial of Service VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 5.3 · 2019-05-03 | 5.3 | 2.0% | 2019-05-03 |
| CVE-2021-44717Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file des…Golang · Go · 2022-01-01 | – | 2.0% | 2022-01-01 |
| CVE-2025-4756D-Link DI-7003GV2 restart.asp denial of serviceD-Link · DI-7003GV2 · CVSS 5.3 · 2025-05-16 | 5.3 | 2.0% | 2025-05-16 |
| CVE-2020-28327A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1. and Certified Asterisk befor…Digium · Certified Asterisk · 2020-11-06 | – | 1.9% | 2020-11-06 |
| CVE-2016-8212An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and…Dell · RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2 · 2017-02-03 | – | 1.9% | 2017-02-03 |
| CVE-2012-2805Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.Ffmpeg · Ffmpeg · 2017-08-28 | – | 1.9% | 2017-08-28 |
| CVE-2017-1145IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhausti…IBM Corporation · WebSphere MQ · 2017-03-20 | – | 1.9% | 2017-03-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.