CWE-664 · Other weaknesses
Improper Control of a Resource Through its Lifetime
57CVEs
1exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
57 CVEs with CWE-664 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-27518In CISA KEVExploitedUnauthenticated remote arbitrary code executionCitrix · Citrix Gateway, Citrix ADC · CVSS 9.8 · 2022-12-13 | 9.8 | 6.9% | 2022-12-13 |
| CVE-2026-43503net: skbuff: propagate shared-frag marker through frag-transfer helpersLinux · Linux · CVSS 8.8 · 2026-05-23 | 8.8 | 2.0% | 2026-05-23 |
| CVE-2020-3175Cisco MDS 9000 Series Multilayer Switches Denial of Service VulnerabilityCisco · Cisco NX-OS Software 5.0(1a) · CVSS 8.6 · 2020-02-26 | 8.6 | 2.0% | 2020-02-26 |
| CVE-2019-16779In RubyGem excon, interrupted Persistent Connections May Leak Response Dataexcon · excon · CVSS 5.8 · 2019-12-16 | 5.8 | 1.7% | 2019-12-16 |
| CVE-2019-5816Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.Google · Chrome · 2019-06-27 | – | 1.6% | 2019-06-27 |
| CVE-2024-45383A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially…Microsoft · HDAudBus.sys · CVSS 5 · 2024-09-12 | 5.0 | 1.5% | 2024-09-12 |
| CVE-2022-31153OpenZeppelin Contracts for Cairo account cannot process transactions on GoerliOpenZeppelin · cairo-contracts · CVSS 6.5 · 2022-07-15 | 6.5 | 1.5% | 2022-07-15 |
| CVE-2022-20748Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 5.3 · 2022-05-03 | 5.3 | 1.3% | 2022-05-03 |
| CVE-2022-20856Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2022-09-30 | 8.6 | 1.3% | 2022-09-30 |
| CVE-2021-1592Cisco UCS Manager Software SSH Sessions Denial of Service VulnerabilityCisco · Cisco Unified Computing System (Managed) · CVSS 4.3 · 2021-08-25 | 4.3 | 1.0% | 2021-08-25 |
| CVE-2022-27512Temporary disruption of the ADM license serviceCitrix · Citrix Application Delivery Management (Citrix ADM) · 2022-06-16 | – | 1.0% | 2022-06-16 |
| CVE-2022-46144A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE…Siemens · SCALANCE SC622-2C · CVSS 6.5 · 2022-12-13 | 6.5 | 0.9% | 2022-12-13 |
| CVE-2022-1385Invitation Email is resent as a Reminder after invalidating pending email invitesMattermost · Mattermost · CVSS 3.7 · 2022-04-19 | 3.7 | 0.8% | 2022-04-19 |
| CVE-2016-8763The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with softwa…Huawei · P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and ea… · 2017-04-02 | – | 0.8% | 2017-04-02 |
| CVE-2026-72041espintcp: use sk_msg_free_partial to fix partial sendLinux · Linux · CVSS 9.8 · 2026-08-15 | 9.8 | 0.7% | 2026-08-15 |
| CVE-2023-44288Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource through its lifetime vulnerability. An unauthenticated network attacker could potentiall…Dell · PowerScale OneFS · CVSS 7.5 · 2023-12-05 | 7.5 | 0.7% | 2023-12-05 |
| CVE-2024-41169Apache Zeppelin: raft directory listing and file readApache Software Foundation · Apache Zeppelin · CVSS 7.5 · 2025-07-12 | 7.5 | 0.7% | 2025-07-12 |
| CVE-2022-32846A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.Apple · Apple Music for Android · CVSS 7.5 · 2023-02-27 | 7.5 | 0.6% | 2023-02-27 |
| CVE-2023-25942Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this…Dell · PowerScale OneFS · CVSS 6.5 · 2023-04-04 | 6.5 | 0.6% | 2023-04-04 |
| CVE-2022-28287In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99.Mozilla · Firefox · CVSS 6.5 · 2022-12-22 | 6.5 | 0.6% | 2022-12-22 |
| CVE-2026-20353Cisco Secure Email Gateway Security Hardening ReleaseCisco · Cisco Secure Email · CVSS 9.8 · 2026-09-14 | 9.8 | 0.5% | 2026-09-14 |
| CVE-2026-20274Cisco IOS XR Software Security Hardening Release: September 2026Cisco · Cisco IOS XR Software · CVSS 9.8 · 2026-09-02 | 9.8 | 0.5% | 2026-09-02 |
| CVE-2026-54251netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Servicenetty · netty-incubator-codec-ohttp · CVSS 8.7 · 2026-09-15 | 8.7 | 0.5% | 2026-09-15 |
| CVE-2026-8517Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbi…Google · Chrome · CVSS 8.8 · 2026-05-14 | 8.8 | 0.5% | 2026-05-14 |
| CVE-2022-22249Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainJuniper Networks · Junos OS · CVSS 6.5 · 2022-10-18 | 6.5 | 0.5% | 2022-10-18 |
| CVE-2024-37139Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a Resource Through its Lifetime vulnerability in an admin ope…Dell · PowerProtect DD · CVSS 6.5 · 2024-06-26 | 6.5 | 0.5% | 2024-06-26 |
| CVE-2026-43158xfs: fix freemap adjustments when adding xattrs to leaf blocksLinux · Linux · CVSS 8.8 · 2026-05-06 | 8.8 | 0.5% | 2026-05-06 |
| CVE-2026-20269Cisco IOS XE Software Security Hardening ReleaseCisco · Cisco IOS XE Software · CVSS 8.6 · 2026-08-05 | 8.6 | 0.5% | 2026-08-05 |
| CVE-2026-20158Cisco RoomOS Security Hardening Release - Resource Lifetime Management VulnerabilitiesCisco · Cisco RoomOS Software · CVSS 7.5 · 2026-07-15 | 7.5 | 0.5% | 2026-07-15 |
| CVE-2026-102026Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is usedJuniper Networks · Junos OS · CVSS 7.5 · 2026-10-14 | 7.5 | 0.5% | 2026-10-14 |
| CVE-2024-22365linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.Linux-Pam · Linux-Pam · CVSS 5.5 · 2024-02-06 | 5.5 | 0.5% | 2024-02-06 |
| CVE-2026-76282Improper Control of a Resource Through its Lifetime in Splunk EnterpriseSplunk · Splunk Enterprise · CVSS 8.8 · 2026-10-07 | 8.8 | 0.4% | 2026-10-07 |
| CVE-2026-76408Improper Control of a Resource Through its Lifetime in Splunk SOARSplunk · Splunk SOAR · CVSS 9.8 · 2026-10-21 | 9.8 | 0.4% | 2026-10-21 |
| CVE-2023-44295Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime vulnerability. A low privilege attacker could potentially ex…Dell · PowerScale OneFS · CVSS 6.3 · 2023-12-05 | 6.3 | 0.4% | 2023-12-05 |
| CVE-2026-76300Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise · CVSS 8.8 · 2026-10-21 | 8.8 | 0.4% | 2026-10-21 |
| CVE-2026-86203PocketMine-MP before 5.39.2 Item Duplication via Despawn Statepmmp · PocketMine-MP · CVSS 3.7 · 2026-09-09 | 3.7 | 0.3% | 2026-09-09 |
| CVE-2026-76500Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime VulnerabilitiesCisco · Cisco Application Policy Infrastructure Controller (APIC) · CVSS 9.8 · 2026-10-07 | 9.8 | 0.3% | 2026-10-07 |
| CVE-2023-52387Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.Huawei · HarmonyOS · CVSS 7.5 · 2024-02-18 | 7.5 | 0.3% | 2024-02-18 |
| CVE-2022-22250Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remoteJuniper Networks · Junos OS · CVSS 6.5 · 2022-10-18 | 6.5 | 0.3% | 2022-10-18 |
| CVE-2020-1622Junos OS Evolved: EvoSharedObjStore may leak sensitive informationJuniper Networks · Junos OS Evolved · CVSS 5.5 · 2020-04-08 | 5.5 | 0.3% | 2020-04-08 |
| CVE-2020-1621Junos OS Evolved: Configd leaks hashes via stream and is world readableJuniper Networks · Junos OS Evolved · CVSS 5.5 · 2020-04-08 | 5.5 | 0.3% | 2020-04-08 |
| CVE-2020-1620Junos OS Evolved: Configd leaks hashes via log file and is world readableJuniper Networks · Junos OS Evolved · CVSS 5.5 · 2020-04-08 | 5.5 | 0.3% | 2020-04-08 |
| CVE-2026-20336Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Man…Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 8.8 · 2026-09-16 | 8.8 | 0.3% | 2026-09-16 |
| CVE-2026-79289Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass…Google · Chrome · CVSS 3.1 · 2026-08-25 | 3.1 | 0.3% | 2026-08-25 |
| CVE-2020-3504Cisco UCS Manager Software Local Management CLI Denial of Service VulnerabilityCisco · Cisco Unified Computing System (Managed) · CVSS 3.3 · 2020-08-27 | 3.3 | 0.3% | 2020-08-27 |
| CVE-2026-76467Cisco Meraki Software Hardening Release - Resource Lifetime Management VulnerabilitiesCisco · Cisco Campus Gateway Software · CVSS 7.5 · 2026-10-07 | 7.5 | 0.3% | 2026-10-07 |
| CVE-2025-21593Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crashJuniper Networks · Junos OS · CVSS 6.5 · 2025-01-09 | 6.5 | 0.2% | 2025-01-09 |
| CVE-2024-7889Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows · CVSS 7 · 2024-09-11 | 7.0 | 0.2% | 2024-09-11 |
| CVE-2026-79603Unconditionally do TLB flushing ahead of page scrubbingXen · Xen · CVSS 4.3 · 2026-09-08 | 4.3 | 0.2% | 2026-09-08 |
| CVE-2020-36774plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).Gnome · Glade · CVSS 5.5 · 2024-02-19 | 5.5 | 0.2% | 2024-02-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.