CWE-835

886 vulnerabilities with CWE-835

CVE-2026-68499 MEDIUM

node-re2 < 1.25.2 - Infinite Loop Denial of Service

CVSS 6.2

CVE-2026-59901 HIGH

Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

CVE-2026-67214 MEDIUM

nanoid before 5.1.16 Infinite Loop via Negative Size in non-secure module

CVSS 5.9

CVE-2026-67213 MEDIUM

nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom

CVSS 5.9

CVE-2026-59933 HIGH

PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

CVSS 7.5

CVE-2026-10683 LOW

Zephyr DesignWare I2C Target Driver - Denial of Service

CVSS 2.4

CVE-2026-66730 HIGH

facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

CVSS 7.5

CVE-2026-43871 HIGH

Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

CVSS 7.5

CVE-2026-64611 HIGH

Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()

CVSS 7.5

CVE-2026-64834 HIGH

FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer

CVSS 7.5

CVE-2026-16551 MEDIUM

Denial-of-Service in OpenCanary's MongoDB module

CVE-2026-45820 MEDIUM

101arrowz Fflate - Uncontrolled Resource Consumption

CVE-2026-56852 HIGH

Infinite loop on invalid input in golang.org/x/text

CVSS 7.5

CVE-2026-59849 LOW

Libssh: libssh: denial of service via automatic certificate authentication loop

CVSS 3.1

CVE-2026-54538 HIGH

xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER

CVSS 7.5

CVE-2026-45785 MEDIUM

OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

CVSS 6.2

CVE-2026-7771 MEDIUM

IBM Db2 11.5.0-11.5.9 and 12.1.0-12.1.4 - Query Compilation Denial of Service

CVSS 5.5

CVE-2026-46378 MEDIUM

Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal

CVSS 6.2

CVE-2026-13401 HIGH

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes

CVSS 7.5

CVE-2026-13397 HIGH

HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes

CVSS 7.5

CVE-2026-50647 HIGH

Microsoft Windows 10 Version 1607 - Active Directory Federation Server Denial of Service Vulnerability

CVSS 7.5

CVE-2026-50324 MEDIUM

Windows Active Directory Federation Services Denial of Service Vulnerability

CVSS 5.9

CVE-2026-54119 HIGH

Microsoft Windows 10 Version 1607 - Windows Active Directory Denial of Service Vulnerability

CVSS 7.5

CVE-2026-50653 HIGH

Azure Active Directory Denial of Service Vulnerability

CVSS 7.5

CVE-2026-62642 MEDIUM

Roundcube Webmail - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSS 4.3