Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-35667MEDIUMOpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.tsEPSS 0.1%CVE-2026-9529MEDIUMGNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereferenceEPSS 0.1%CVE-2025-13397MEDIUMmrubyc alloc.c mrbc_raw_realloc null pointer dereferenceEPSS 0.1%CVE-2025-43935MEDIUMDell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerability. A high privileged attackEPSS 0.1%CVE-2026-61187LOWVulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version tEPSS 0.1%CVE-2025-15535MEDIUMnicbarker clay clay.h Clay__MeasureTextCached null pointer dereferenceEPSS 0.1%CVE-2026-61028LOWVulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions thEPSS 0.1%CVE-2025-14841MEDIUMOFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereferenceEPSS 0.1%CVE-2026-91782MEDIUMGNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereferenceEPSS 0.1%CVE-2026-91781MEDIUMGNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereferenceEPSS 0.1%CVE-2026-60896LOWVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that arEPSS 0.1%CVE-2026-45174HIGHIdira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon InitializationEPSS 0.1%CVE-2026-90802MEDIUMGNU Binutils ld libbfd.c bfd_putl64 null pointer dereferenceEPSS 0.1%CVE-2026-76014MEDIUMBusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereferenceEPSS 0.1%CVE-2026-10775LOWsgl-project SGLang Cache data_hash denial of serviceEPSS 0.1%CVE-2026-4833MEDIUMOrc discount Markdown markdown.c compile recursionEPSS 0.1%CVE-2026-10295MEDIUMSourceCodester Customer Review App review_app.py get_all_reviews denial of serviceEPSS 0.1%CVE-2026-19382MEDIUMAlmico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leakEPSS 0.1%CVE-2026-10199MEDIUMAssimp glTF2Asset.h LazyDict null pointer dereferenceEPSS 0.1%CVE-2026-90573MEDIUMGPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereferenceEPSS 0.1%