CWE-672 Operation on a Resource after Expiration or Release
classThe product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (176)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-5736US | high8.6 | Exploit | ||
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveragi… | ||||
| CVE-2019-17638US | critical9.4 | Exploit | ||
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, t… | ||||
| CVE-2020-24030US | critical9.8 | Exploit | ||
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14,… | ||||
| CVE-2024-23638US | medium6.5 | — | ||
Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error re… | ||||
| CVE-2020-11027US | high8.1 | Exploit | ||
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user… | ||||
| CVE-2026-23111US | high7.8 | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
nft_map_catchall_activate() ha… | ||||
| CVE-2019-15791US | high7.8 | Exploit | ||
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the l… | ||||
| CVE-2020-12043US | critical9.8 | — | ||
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is… | ||||
| CVE-2019-19725US | critical9.8 | — | ||
sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. | ||||
| CVE-2009-3547US | high7.0 | Exploit | ||
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privi… | ||||
| CVE-2026-33278US | critical9.8 | — | ||
NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a resu… | ||||
| CVE-2026-43585US | critical9.8 | — | ||
OpenClaw before 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation. Gateway HTTP and WebSocket handl… | ||||
| CVE-2024-47571US | critical9.8 | — | ||
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials. | ||||
| CVE-2023-41094US | critical9.8 | — | ||
TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a devic… | ||||
| CVE-2014-1557US | high9.3 | — | ||
The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discardin… | ||||
| CVE-2019-15794US | medium6.7 | Exploit | ||
Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handle… | ||||
| CVE-2019-2126US | high8.8 | — | ||
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional… | ||||
| CVE-2013-10075US | critical9.1 | — | ||
Apache::Session versions through 1.94 for Perl re-creates deleted sessions.
The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a sessi… | ||||
| CVE-2024-27308US | critical9.1 | — | ||
Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already bee… | ||||
| CVE-2014-3505US | medium5.0 | — | ||
Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a d… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan