CWE-672: Operation on a Resource after Expiration or Release, page 3
Filter
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
What the weakness is: CWE-672 at MITRE. All weaknesses
Ask an AI about CWE-672
Show the prompt
Explain CWE-672: Operation on a Resource after Expiration or Release and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/672.html and https://cve.bz/cve/cwe/672?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.8CVE-2020-24030EPSS 2.7%
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable…
- 9.4CVE-2019-17638EPSS 11%
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is relea…
- 9.8CVE-2020-12043EPSS 2.1%
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted.
- 2.2CVE-2020-11044EPSS 1.7%
In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.
- 8.1CVE-2020-11027ExploitEPSS 14%
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has bee…
- 6.7CVE-2019-15794ExploitEPSS 1.2%
Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the re…
- 7.8CVE-2019-15791ExploitEPSS 1.3%
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to t…
- 6.5CVE-2019-20022EPSS 0.9%
An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.
- 7.2CVE-2019-15691EPSS 4.7%
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which…
- 4.6CVE-2019-19480EPSS 0.6%
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.
- 7.8CVE-2017-14895EPSS 0.3%
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, after a subsystem reset, iwpriv is not giving correct information.
- 7.8CVE-2017-0544EPSS 0.9%
An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as High because it is a local arbitrary code execution in a privileged process. Product: Androi…
- 7.0CVE-2009-3547ExploitEPSS 4.9%
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*…