CWE-664: Improper Control of a Resource Through its Lifetime
The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.
From the CWE List. © The MITRE Corporation.
Newest
- asterisk, asterisk certified-asterisk +1 more Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing 7.1 High
- splunk soar Improper Control of a Resource Through its Lifetime in Splunk SOAR 9.8 Critical
- splunk enterprise Security Hardening in Splunk Enterprise - October 2026 8.8 High
- eclipse foundation threadx Module object deallocation can free a live ThreadX kernel object 8.5 High
- mz automation libiec61850 libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle 5.3 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used 8.7 High
- splunk, splunk enterprise +1 more Improper Control of a Resource Through its Lifetime in Splunk Enterprise 8.8 High
- cisco campus gateway software, meraki mr wireless access points software, meraki mv firmware +1 more +3 more Cisco Meraki Software Hardening Release - Resource Lifetime Management Vulnerabilities 7.5 High
- cisco application policy infrastructure controller (apic) Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities 9.8 Critical
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 more Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabiliti… 8.8 High
- cisco secure email Cisco Secure Email Gateway Security Hardening Release 9.8 Critical
- xen Unconditionally do TLB flushing ahead of page scrubbing 4.3 Medium
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Security Hardening Release: September 2026 9.8 Critical
- google chrome Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0... 3.1 Low
- io.netty.incubator netty-incubator-codec-ohttp netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service 8.7 High
- @fastify/multipart, fastify fastify-multipart +1 more @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit 7.5 High
- linux espintcp: use sk_msg_free_partial to fix partial send 9.8 Critical
- mullvad wireguard.sys Mullvad wireguard.sys IOCTL AdapterState reference count 4.6 Medium
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software Security Hardening Release 8.6 High
- mz automation libiec61850 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path 5.3 Medium
- mz automation libiec61850 mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap 6.9 Medium
- apple ipados, macos, tvos +4 more +6 more This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and... 5.5 Medium
- cisco roomos, roomos software, roomos cloud +2 more Cisco RoomOS Security Hardening Release - Resource Lifetime Management Vulnerabilities 7.5 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 more net: skbuff: propagate shared-frag marker through frag-transfer helpers 8.8 High
- google chrome Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker... 5.3 Medium
- google chrome Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a... 8.8 High
- linux, linux kernel +1 more xfs: fix freemap adjustments when adding xattrs to leaf blocks 8.8 High
- pmmp pocketmine-mp PocketMine-MP before 5.39.2 Item Duplication via Despawn State 6.3 Medium
- autonomy logic openplc runtime OpenPLC Runtime v3 Persistent DoS 7.1 High
- huawei harmonyos Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this... 5.3 Medium
- huawei harmonyos Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this... 5.3 Medium
- huawei harmonyos Iterator failure vulnerability in the card management module. Impact: Successful exploitation of... 5.9 Medium
- huawei harmonyos Iterator failure vulnerability in the card management module. Impact: Successful exploitation of... 5.9 Medium
- apache zeppelin Apache Zeppelin: raft directory listing and file read 7.5 High
-
tokiocrates.io Tokio broadcast channel calls clone in parallel, but does not require `Sync` 2.7 Low - juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash 7.1 High
- microsoft high definition audio bus driver, hdaudbus.sys +1 more A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft... 5.0 Medium
- citrix workspace app for windows, workspace, workspace app +2 more Local privilege escalation allows a low-privileged user to gain SYSTEM privileges 7.0 High
- dell powerprotect dd, data domain operating system +1 more Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an... 6.5 Medium
- gnome glade plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles... 5.5 Medium
- huawei emui, harmonyos +1 more Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may... 7.5 High
- micronaut-projects micronaut-core, objectcomputing micronaut +1 more micronaut-core management endpoints vulnerable to drive-by localhost attack 5.1 Medium
- linux-pam, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +10 more +12 more linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked... 5.5 Medium
- dell powerscale onefs Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a... 6.3 Medium
- dell powerscale onefs Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource... 7.5 High
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption... 6.5 Medium
- apple music, music for android +1 more A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3... 7.5 High
- siemens scalance sc622-2c, scalance sc626-2c, scalance sc632-2c +17 more +19 more A vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C... 7.1 High
- citrix application delivery controller (adc) and gateway, application delivery controller firmware, gateway, citrix adc +1 more +3 more Unauthenticated remote arbitrary code execution 9.8 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote 6.5 Medium
- Show olderLoading…