Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-90713MEDIUMvllm-project vLLM tiktoken vocab File mod.rs new denial of serviceEPSS 0.2%CVE-2026-15274MEDIUMlo48576 fbxcel Node Header parser.rs denial of serviceEPSS 0.2%CVE-2026-15276MEDIUMpdeljanov Symphonia Metadata denial of serviceEPSS 0.2%CVE-2026-14651MEDIUMconnorskees grass visitor denial of serviceEPSS 0.2%CVE-2026-13523MEDIUMGPAC ISOBMFF base_encoding.c data amplificationEPSS 0.2%CVE-2026-14801MEDIUMGPAC TeXML File load_text.c txtin_probe_duration divide by zeroEPSS 0.2%CVE-2026-94137MEDIUMHangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdrv_x64.sys sub_180004AC0 denial of serviceEPSS 0.2%CVE-2024-47972MEDIUMImproper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the reEPSS 0.2%CVE-2025-13397MEDIUMmrubyc alloc.c mrbc_raw_realloc null pointer dereferenceEPSS 0.2%CVE-2025-10475MEDIUMSpyShelter IOCTL SpyShelter.sys denial of serviceEPSS 0.2%CVE-2025-11642MEDIUMTomofun Furbo 360/Furbo Mini Registration denial of serviceEPSS 0.2%CVE-2026-101400LOWVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are EPSS 0.2%CVE-2026-101401LOWVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are EPSS 0.2%CVE-2026-34317MEDIUMVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.EPSS 0.2%CVE-2026-91302LOWVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versEPSS 0.2%CVE-2025-10823MEDIUMaxboe fio options.c str_buffer_pattern_cb null pointer dereferenceEPSS 0.2%CVE-2026-102700MEDIUMgnttab: cache-flush handling may cause page reference leakEPSS 0.1%CVE-2026-35667MEDIUMOpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.tsEPSS 0.1%CVE-2026-47491HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release EPSS 0.1%CVE-2026-9529MEDIUMGNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereferenceEPSS 0.1%