Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2026-90713MEDIUMvllm-project vLLM tiktoken vocab File mod.rs new denial of serviceEPSS 0.2%CVE-2026-15274MEDIUMlo48576 fbxcel Node Header parser.rs denial of serviceEPSS 0.2%CVE-2026-15276MEDIUMpdeljanov Symphonia Metadata denial of serviceEPSS 0.2%CVE-2026-14651MEDIUMconnorskees grass visitor denial of serviceEPSS 0.2%CVE-2026-13523MEDIUMGPAC ISOBMFF base_encoding.c data amplificationEPSS 0.2%CVE-2026-14801MEDIUMGPAC TeXML File load_text.c txtin_probe_duration divide by zeroEPSS 0.2%CVE-2026-94137MEDIUMHangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdrv_x64.sys sub_180004AC0 denial of serviceEPSS 0.2%CVE-2024-47972MEDIUMImproper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the reEPSS 0.2%CVE-2025-13397MEDIUMmrubyc alloc.c mrbc_raw_realloc null pointer dereferenceEPSS 0.2%CVE-2025-10475MEDIUMSpyShelter IOCTL SpyShelter.sys denial of serviceEPSS 0.2%CVE-2025-11642MEDIUMTomofun Furbo 360/Furbo Mini Registration denial of serviceEPSS 0.2%CVE-2026-101400LOWVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are EPSS 0.2%CVE-2026-101401LOWVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are EPSS 0.2%CVE-2026-34317MEDIUMVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.EPSS 0.2%CVE-2026-91302LOWVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versEPSS 0.2%CVE-2025-10823MEDIUMaxboe fio options.c str_buffer_pattern_cb null pointer dereferenceEPSS 0.2%CVE-2026-102700MEDIUMgnttab: cache-flush handling may cause page reference leakEPSS 0.1%CVE-2026-35667MEDIUMOpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.tsEPSS 0.1%CVE-2026-47491HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release EPSS 0.1%CVE-2026-9529MEDIUMGNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereferenceEPSS 0.1%