Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-84425MEDIUMzhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of serviceEPSS 0.5%CVE-2026-8269MEDIUMOpen5GS SMF smf_nsmf_handle_create_sm_context denial of serviceEPSS 0.5%CVE-2026-14626MEDIUMNousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of serviceEPSS 0.5%CVE-2026-19745MEDIUMCalix GigaSpire Web Management utilities_configurationsave.cgi denial of serviceEPSS 0.5%CVE-2026-84885MEDIUMsimular-ai Agent-S CodeAgent code_agent.py denial of serviceEPSS 0.5%CVE-2026-94094MEDIUMOpenClaw Canvas Host Route server.ts createCanvasHostHandler denial of serviceEPSS 0.5%CVE-2026-84427MEDIUMzhayujie CowAgent Bash Tool bash.py denial of serviceEPSS 0.5%CVE-2026-84288MEDIUMNousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of serviceEPSS 0.5%CVE-2026-19746MEDIUMCalix GigaSpire traceroute.cmd denial of serviceEPSS 0.5%CVE-2026-85407MEDIUMEleveo Quality Management Conversation events denial of serviceEPSS 0.5%CVE-2025-11635MEDIUMTomofun Furbo 360 File Upload resource consumptionEPSS 0.5%CVE-2024-12659MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E004 null pointer dereferenceEPSS 0.5%CVE-2024-12660MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereferenceEPSS 0.5%CVE-2026-7734MEDIUMosrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of serviceEPSS 0.5%CVE-2025-7462MEDIUMArtifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereferenceEPSS 0.5%CVE-2024-12658MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereferenceEPSS 0.5%CVE-2024-12655MEDIUMFabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereferenceEPSS 0.5%CVE-2022-46314HIGHThe IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.EPSS 0.5%CVE-2026-8266MEDIUMOpen5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of serviceEPSS 0.5%CVE-2026-8251MEDIUMOpen5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of serviceEPSS 0.5%