CWE-664 Improper Control of a Resource Through its Lifetime
pillarThe product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.
01
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
02
Schwachstellen (254)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-27518US | critical9.8OT kritisch | KEV | ||
Unauthenticated remote arbitrary code execution | ||||
| CVE-2026-76500US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comp… | ||||
| CVE-2026-20353US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte… | ||||
| CVE-2026-20274US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review.… | ||||
| CVE-2019-5816US | high8.8 | — | ||
Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page. | ||||
| CVE-2026-20336US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2022-22755US | high8.8 | — | ||
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even… | ||||
| CVE-2022-4190US | high8.8 | — | ||
Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium se… | ||||
| CVE-2021-4100US | high8.8 | — | ||
Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2020-3175US | high8.6 | — | ||
A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a den… | ||||
| CVE-2022-27778US | high8.1 | — | ||
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`. | ||||
| CVE-2023-44295US | high8.1 | — | ||
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime vulnerability. A low privilege attacker could potentially ex… | ||||
| CVE-2016-3949US | high7.5 | — | ||
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers… | ||||
| CVE-2023-53504US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF
ib_dealloc_device() should be called only after… | ||||
| CVE-2023-53500US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix slab-use-after-free in decode_session6
When the xfrm device is set to the qdisc of the sfb type, the… | ||||
| CVE-2023-53494US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: xts - Handle EBUSY correctly
As it is xts only handles the special return value of EINPROGRESS,
which… | ||||
| CVE-2023-53484US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
When calling irq_set_affinity_notifier() with N… | ||||
| CVE-2022-50422US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
When executing SMP task failed, the smp_execute_… | ||||
| CVE-2023-53386US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-af… | ||||
| CVE-2025-38718US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sctp: linearize cloned gso packets in sctp_rcv
A cloned head skb still shares these frag skbs in fraglist with… | ||||
03
Angriffsmuster (5)
CAPEC-Angriffsmuster, die dies ausnutzen.
04
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan