Fallos del tipo CWE-404
748 resultadosLiberação ou encerramento inadequado de recursos
Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.
Ejemplo
Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.
Cómo mitigar
Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.
CVE-2025-43935MEDIUMDell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerability. A high privileged attackEPSS 0.1%CVE-2025-15535MEDIUMnicbarker clay clay.h Clay__MeasureTextCached null pointer dereferenceEPSS 0.1%CVE-2026-61187LOWVulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version tEPSS 0.1%CVE-2026-38763MEDIUMAn issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub_13828EPSS 0.1%CVE-2026-61028LOWVulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions thEPSS 0.1%CVE-2025-14841MEDIUMOFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereferenceEPSS 0.1%CVE-2026-109277MEDIUMImageMagick before 7.1.2-32 Policy Bypass via -script OperationEPSS 0.1%CVE-2026-2903MEDIUMskvadrik re2c ast.cc check_and_merge_special_rules null pointer dereferenceEPSS 0.1%CVE-2026-60896LOWVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that arEPSS 0.1%CVE-2026-45174HIGHIdira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon InitializationEPSS 0.1%CVE-2026-45955HIGHmd/md-llbitmap: fix percpu_ref not resurrected on suspend timeoutEPSS 0.1%CVE-2026-4833MEDIUMOrc discount Markdown markdown.c compile recursionEPSS 0.1%CVE-2026-76014MEDIUMBusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereferenceEPSS 0.1%CVE-2026-10295MEDIUMSourceCodester Customer Review App review_app.py get_all_reviews denial of serviceEPSS 0.1%CVE-2026-4174MEDIUMRadare2 Mach-O File mach0.c walk_exports_trie resource consumptionEPSS 0.1%CVE-2026-10775LOWsgl-project SGLang Cache data_hash denial of serviceEPSS 0.1%CVE-2026-10199MEDIUMAssimp glTF2Asset.h LazyDict null pointer dereferenceEPSS 0.1%CVE-2026-91324MEDIUMVulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. DiffEPSS 0.1%CVE-2026-10197MEDIUMAssimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereferenceEPSS 0.1%CVE-2026-9567MEDIUMGPAC MP4Box isom_intern.c MergeFragment null pointer dereferenceEPSS 0.1%