CWE-672

83 vulnerabilities with CWE-672

CVE-2026-42955 LOW

NLnet Labs Unbound < 1.25.2 - Ghost Domain Renewal via Glue Records

CVSS 3.7

CVE-2026-47087 LOW

Cyrusimap Cyrus Imap < 3.12.3 - Operation on a Resource after Expiration or Release

CVSS 3.5

CVE-2026-58291 MEDIUM

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVSS 6.1

CVE-2026-56314 HIGH

Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint

CVSS 7.1

CVE-2026-2379 MEDIUM

Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled

CVSS 5.9

CVE-2026-33463 MEDIUM

Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access

CVSS 5.3

CVE-2026-42791 LOW

OCSP responder certificate validity period not checked in public_key

CVSS 3.7

CVE-2026-33278 CRITICAL

Unbound 1.19.1-1.25.0 - Use-After-Free in DNSSEC Validator via Deep Copy Pointer Overwrite

CVSS 9.8

CVE-2026-32244 MEDIUM

Discourse: Cached outdated summaries can leak removed content

CVSS 5.3

CVE-2026-4053 LOW

post edit time limit is not enforced on some post update operations

CVSS 3.1

CVE-2026-45005 MEDIUM

OpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation

CVSS 6.0

CVE-2026-43585 HIGH

OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution

CVSS 8.1

CVE-2026-1629 MEDIUM

Permalink Preview Information Disclosure After Permission Revocation

CVSS 4.3

CVE-2026-31875 MEDIUM

Parse Server <9.6.0-alpha.7/8.6.33 - Auth Bypass

CVSS 5.9

CVE-2026-30978 HIGH

iccdev < 2.3.1.5 - Use-After-Free in CIccCmm::AddXform()

CVSS 7.8

CVE-2026-23111 HIGH

Linux Kernel < 5.15.200 Use-After-Free in nft_map_catchall_activate

CVSS 7.8

CVE-2026-1237 LOW

juju - Improper Verification of Cryptographic Signature in Cross-Model Authorization

CVE-2025-69415 HIGH

Plex Media Server <1.42.2.10156 - Info Disclosure

CVSS 7.1

CVE-2025-58149 HIGH

Xen >=4.0.0 - Use-After-Free in PCI Device Detach Logic

CVSS 7.5

CVE-2025-55669 HIGH

BIG-IP ASM 16.1.0-16.1.5 - Denial of Service via HTTP/2 Traffic

CVSS 7.5

CVE-2025-10060 MEDIUM

MongoDB Server <6.0.25-8.0.12 - Info Disclosure

CVSS 6.5

CVE-2025-39698 HIGH

Linux Kernel - Use-After-Free in io_uring/futex

CVSS 7.8

CVE-2025-53901 LOW

Wasmtime <24.0.4, 33.0.2, 34.0.2 - Memory Corruption

CVSS 3.5

CVE-2025-38290 HIGH

Linux Kernel 6.3-6.6.93, 6.7-6.12.33, 6.13-6.15.2 - Use-After-Free in ath12k WLAN Recovery

CVSS 8.8

CVE-2025-6031 HIGH

Amazon Cloud Cam - Unauthenticated SSL Pinning Bypass via Deprecated Remote Service

CVSS 7.5