CWE-404 · 752 records
Improper Resource Shutdown or Release
CVEs in this class
752 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
80Now | CVE-2018-8120Weaponized | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k microsoft · windows 7 · CWE-404 | High7.0 | KEV | 73.4% | May 9, 2018 |
68This week | CVE-2018-8639Weaponized | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k microsoft · windows 10 1507 · CWE-404 | High7.8 | KEV | 22.1% | Dec 11, 2018 |
62This week | CVE-2018-8611Weaponized | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevamicrosoft · windows 10 1607 · CWE-404 | High7.8 | KEV | 4.1% | Dec 11, 2018 |
62This week | CVE-2018-8405Weaponized | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "microsoft · windows 10 1507 · CWE-404 | High7.8 | KEV | 3.4% | Aug 15, 2018 |
62This week | CVE-2018-8406Weaponized | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "microsoft · windows 10 1507 · CWE-404 | High7.8 | KEV | 3.4% | Aug 15, 2018 |
49Plan | CVE-2022-44267Proof of concept | ImageMagick 7.1.0-49 is vulnerable to Denial of Service.imagemagick · imagemagick · CWE-404 | Medium6.5 | — | 76.5% | Feb 6, 2023 |
40Plan | CVE-2018-8450No exploit | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnermicrosoft · windows 10 · CWE-404 | High8.8 | — | 16.0% | Nov 13, 2018 |
39Monitor | CVE-2018-8210No exploit | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabimicrosoft · windows 10 · CWE-404 | High7.8 | — | 25.2% | Jun 14, 2018 |
39Monitor | CVE-2023-24444No exploit | Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.jenkins · openid · CWE-404 | Critical9.8 | — | 1.1% | Jan 26, 2023 |
37Monitor | CVE-2022-25762No exploit | Response mix-up with WebSocket concurrent send and closeapache · tomcat · CWE-404 | High8.6 | — | 8.4% | May 13, 2022 |
36Monitor | CVE-2023-3206No exploit | Chengdu VEC40G denial of servicefeiyuxing · vec40g firmware · CWE-404 | High7.5 | — | 18.7% | Jun 12, 2023 |
36Monitor | CVE-2026-41869No exploit | Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)apache · nutch · CWE-404 | Critical9.1 | — | 0.7% | Sep 9, 2026 |
36Monitor | CVE-2024-31611No exploit | SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.seacms · seacms · CWE-404 | Critical9.1 | — | 0.5% | Jun 10, 2024 |
35Monitor | CVE-2019-1708No exploit | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerabilitycisco · secure firewall threat defense · CWE-404 | High8.6 | — | 2.0% | May 3, 2019 |
35Monitor | CVE-2017-1145No exploit | IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a deniibm · websphere mq · CWE-404 | High8.6 | — | 1.9% | Mar 20, 2017 |
35Monitor | CVE-2020-26070No exploit | Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerabilitycisco · ios xr · CWE-404 | High8.6 | — | 1.9% | Nov 11, 2020 |
35Monitor | CVE-2025-0492No exploit | D-Link DIR-823X FUN_00412244 null pointer dereferencedlink · dir-823x firmware · CWE-404 | High8.7 | — | 1.8% | Jan 15, 2025 |
34Monitor | CVE-2018-8213No exploit | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabimicrosoft · windows 10 · CWE-404 | High7.8 | — | 8.6% | Jun 14, 2018 |
34Monitor | CVE-2025-4749No exploit | D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of servicedlink · di-7003g firmware · CWE-404 | High8.7 | — | 1.4% | May 16, 2025 |
34Monitor | CVE-2024-4791No exploit | Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of servicecontemporary control system · basrouter bacnet basrt-b · CWE-404 | High8.7 | — | 1.2% | May 14, 2024 |
34Monitor | CVE-2025-5867No exploit | RT-Thread lwp_syscall.c csys_sendto null pointer dereferencert-thread · rt-thread · CWE-404 | High8.6 | — | 1.1% | Jun 9, 2025 |
34Monitor | CVE-2019-1706No exploit | Cisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerabilitycisco · adaptive security appliance software · CWE-404 | High8.6 | — | 1.0% | May 3, 2019 |
34Monitor | CVE-2023-20042No exploit | A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTcisco · secure firewall threat defense · CWE-404 | High8.6 | — | 0.6% | Nov 1, 2023 |
34Monitor | CVE-2025-24811No exploit | A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211siemens · simatic s7-1200 cpu 1211c ac/dc/rly · CWE-404 | High8.7 | — | 0.6% | Feb 11, 2025 |
34Monitor | CVE-2026-29771No exploit | Netmaker: Denial of Service via Server Shutdown Endpointnetmaker · netmaker · CWE-404 | High8.7 | — | 0.4% | Mar 7, 2026 |
- CVE-2018-812080Now
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k
HighCVSS 7.0KEVWeaponizedEPSS 73%microsoft · windows 7May 9, 2018
- CVE-2018-863968This week
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k
HighCVSS 7.8KEVWeaponizedEPSS 22%microsoft · windows 10 1507Dec 11, 2018
- CVE-2018-861162This week
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva
HighCVSS 7.8KEVWeaponizedEPSS 4%microsoft · windows 10 1607Dec 11, 2018
- CVE-2018-840562This week
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "
HighCVSS 7.8KEVWeaponizedEPSS 3%microsoft · windows 10 1507Aug 15, 2018
- CVE-2018-840662This week
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "
HighCVSS 7.8KEVWeaponizedEPSS 3%microsoft · windows 10 1507Aug 15, 2018
- CVE-2022-4426749Plan
ImageMagick 7.1.0-49 is vulnerable to Denial of Service.
MediumCVSS 6.5Proof of conceptEPSS 76%imagemagick · imagemagickFeb 6, 2023
- CVE-2018-845040Plan
A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner
HighCVSS 8.8No exploitEPSS 16%microsoft · windows 10Nov 13, 2018
- CVE-2018-821039Monitor
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi
HighCVSS 7.8No exploitEPSS 25%microsoft · windows 10Jun 14, 2018
- CVE-2023-2444439Monitor
Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.
CriticalCVSS 9.8No exploitEPSS 1%jenkins · openidJan 26, 2023
- CVE-2022-2576237Monitor
Response mix-up with WebSocket concurrent send and close
HighCVSS 8.6No exploitEPSS 8%apache · tomcatMay 13, 2022
- CVE-2023-320636Monitor
Chengdu VEC40G denial of service
HighCVSS 7.5No exploitEPSS 18%feiyuxing · vec40g firmwareJun 12, 2023
- CVE-2026-4186936Monitor
Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
CriticalCVSS 9.1No exploitEPSS 0%apache · nutchSep 9, 2026
- CVE-2024-3161136Monitor
SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.
CriticalCVSS 9.1No exploitEPSS 0%seacms · seacmsJun 10, 2024
- CVE-2019-170835Monitor
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 2%cisco · secure firewall threat defenseMay 3, 2019
- CVE-2017-114535Monitor
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a deni
HighCVSS 8.6No exploitEPSS 1%ibm · websphere mqMar 20, 2017
- CVE-2020-2607035Monitor
Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 1%cisco · ios xrNov 11, 2020
- CVE-2025-049235Monitor
D-Link DIR-823X FUN_00412244 null pointer dereference
HighCVSS 8.7No exploitEPSS 1%dlink · dir-823x firmwareJan 15, 2025
- CVE-2018-821334Monitor
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi
HighCVSS 7.8No exploitEPSS 8%microsoft · windows 10Jun 14, 2018
- CVE-2025-474934Monitor
D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service
HighCVSS 8.7No exploitEPSS 1%dlink · di-7003g firmwareMay 16, 2025
- CVE-2024-479134Monitor
Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service
HighCVSS 8.7No exploitEPSS 1%contemporary control system · basrouter bacnet basrt-bMay 14, 2024
- CVE-2025-586734Monitor
RT-Thread lwp_syscall.c csys_sendto null pointer dereference
HighCVSS 8.6No exploitEPSS 1%rt-thread · rt-threadJun 9, 2025
- CVE-2019-170634Monitor
Cisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 1%cisco · adaptive security appliance softwareMay 3, 2019
- CVE-2023-2004234Monitor
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FT
HighCVSS 8.6No exploitEPSS 0%cisco · secure firewall threat defenseNov 1, 2023
- CVE-2025-2481134Monitor
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211
HighCVSS 8.7No exploitEPSS 0%siemens · simatic s7-1200 cpu 1211c ac/dc/rlyFeb 11, 2025
- CVE-2026-2977134Monitor
Netmaker: Denial of Service via Server Shutdown Endpoint
HighCVSS 8.7No exploitEPSS 0%netmaker · netmakerMar 7, 2026