Skip to content

Weakness class · DOS

Denial of Service

16,803 published CVEs name a weakness in this class; 27 of them are exploited in the wild.
16,803CVEs
27exploited
39CWEs
581disclosed reports

CWEs in this class39

CWEs of Denial of Service, most CVEs first
CWEWeaknessCVEsExploitedCheck
CWE-400Uncontrolled Resource Consumption3,67373
CWE-399Resource Management Errors2,619100
CWE-770Allocation Without Limits2,45901
CWE-401Missing Release of Memory after Effective Lifetime1,96310
CWE-835Loop with Unreachable Exit Condition95912
CWE-617Reachable Assertion89710
CWE-674Uncontrolled Recursion62200
CWE-404Improper Resource Shutdown or Release60150
CWE-1333Inefficient Regular Expression Complexity54600
CWE-369Divide By Zero48800
CWE-772Missing Release of Resource after Effective Lifetime48110
CWE-789Memory Allocation with Excessive Size Value32500
CWE-407Inefficient Algorithmic Complexity293––
CWE-459Incomplete Cleanup243––
CWE-409Improper Handling of Highly Compressed Data (Data Amplification)188––
CWE-834Excessive Iteration98––
CWE-776Improper Restriction of Recursive Entity References in DTDs88––
CWE-405Asymmetric Resource Consumption (Amplification)72––
CWE-1325Improperly Controlled Sequential Memory Allocation26––
CWE-402Transmission of Private Resources into a New Sphere23––
CWE-410Insufficient Resource Pool22––
CWE-406Insufficient Control of Network Message Volume (Network Amplification)21––
CWE-779Logging of Excessive Data20––
CWE-1050Excessive Platform Resource Consumption within a Loop15––
CWE-408Incorrect Behavior Order: Early Amplification10––
CWE-775Missing Release of File Descriptor or Handle after Effective Lifetime9––
CWE-403Exposure of File Descriptor to Unintended Control Sphere7––
CWE-771Missing Reference to Active Allocated Resource7––
CWE-774Allocation of File Descriptors or Handles Without Limits or Throttling5––
CWE-920Improper Restriction of Power Consumption4––
CWE-1176Inefficient CPU Computation4––
CWE-1322Use of Blocking Code in Single-threaded, Non-blocking Context4––
CWE-1049Excessive Data Query Operations in a Large Data Table3––
CWE-730CWE-7302––
CWE-1246Improper Write Handling in Limited-write Non-Volatile Memories2––
CWE-1046Creation of Immutable Text Using String Concatenation1––
CWE-1067Excessive Execution of Sequential Searches of Data Resource1––
CWE-1072Data Resource Access without Use of Connection Pooling1––
CWE-1091Use of Object without Invoking Destructor Method1––

Exploited and check counts are given for the class's largest CWEs; open a CWE for its CVEs.

Data as of 2026-11-14.

Updated AboutDevelopersSign in