Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-8292MEDIUMOpen5GS NRF conv.c yuarel_parse denial of serviceEPSS 0.4%CVE-2026-8268MEDIUMOpen5GS SMF OpenAPI_list_create denial of serviceEPSS 0.4%CVE-2023-1451LOWMP4v2 mp4track.cpp GetSampleFileOffset denial of serviceEPSS 0.4%CVE-2023-1188LOWFabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of serviceEPSS 0.4%CVE-2025-13564MEDIUMSourceCodester Pre-School Management System FilehelperController.php removefile denial of serviceEPSS 0.4%CVE-2026-10190HIGHTenda W12 Web Management httpd cgiSysWebTimeoutSet denial of serviceEPSS 0.4%CVE-2023-1157LOWfinixbit elf-parser elf_parser.cpp get_segments denial of serviceEPSS 0.4%CVE-2024-1192LOWSouth River WebDrive New Secure WebDAV denial of serviceEPSS 0.4%CVE-2023-1187LOWFabulaTech Webcam for Remote Desktop Global Variable ftwebcam.sys denial of serviceEPSS 0.4%CVE-2026-7518MEDIUMOpen5GS AMF SBI Endpoint sdmsubscription-notify amf_namf_callback_handle_sdm_data_change_notify denial of serviceEPSS 0.4%CVE-2025-15687MEDIUMOpen5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of serviceEPSS 0.4%CVE-2024-1186LOWMunsoft Easy Archive Recovery Registration Key denial of serviceEPSS 0.4%CVE-2024-1185LOWNsasoft NBMonitor Network Bandwidth Monitor Registration denial of serviceEPSS 0.4%CVE-2026-75012HIGHTOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereferenceEPSS 0.4%CVE-2026-75013HIGHTOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereferenceEPSS 0.4%CVE-2026-7779MEDIUMOpen5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscription_authentication denial of serviceEPSS 0.4%CVE-2025-0222MEDIUMIObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereferenceEPSS 0.4%CVE-2025-0221MEDIUMIOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereferenceEPSS 0.4%CVE-2025-0223MEDIUMIObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereferenceEPSS 0.4%CVE-2026-7263MEDIUMDoS attack via DOMNode::C14N()EPSS 0.4%