CWE-664 Improper Control of a Resource Through its Lifetime
pillarThe product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.
01
child weaknesses
More specific entries beneath this one.
02
vulnerabilities (254)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-27518US | critical9.8OT critical | KEV | ||
Unauthenticated remote arbitrary code execution | ||||
| CVE-2026-76500US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comp… | ||||
| CVE-2026-20353US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte… | ||||
| CVE-2026-20274US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review.… | ||||
| CVE-2019-5816US | high8.8 | — | ||
Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page. | ||||
| CVE-2026-20336US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2022-22755US | high8.8 | — | ||
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even… | ||||
| CVE-2022-4190US | high8.8 | — | ||
Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium se… | ||||
| CVE-2021-4100US | high8.8 | — | ||
Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2020-3175US | high8.6 | — | ||
A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a den… | ||||
| CVE-2022-27778US | high8.1 | — | ||
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`. | ||||
| CVE-2023-44295US | high8.1 | — | ||
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime vulnerability. A low privilege attacker could potentially ex… | ||||
| CVE-2016-3949US | high7.5 | — | ||
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers… | ||||
| CVE-2023-53504US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF
ib_dealloc_device() should be called only after… | ||||
| CVE-2023-53500US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix slab-use-after-free in decode_session6
When the xfrm device is set to the qdisc of the sfb type, the… | ||||
| CVE-2023-53494US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: xts - Handle EBUSY correctly
As it is xts only handles the special return value of EINPROGRESS,
which… | ||||
| CVE-2023-53484US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
When calling irq_set_affinity_notifier() with N… | ||||
| CVE-2022-50422US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
When executing SMP task failed, the smp_execute_… | ||||
| CVE-2023-53386US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-af… | ||||
| CVE-2025-38718US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sctp: linearize cloned gso packets in sctp_rcv
A cloned head skb still shares these frag skbs in fraglist with… | ||||
03
attack patterns (5)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan