# CWE-672.

Every Advisory and CVE whose sources give the weakness CWE-672, newest first.

## Records, newest first

- [Google Chrome: Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121256.md)
  `CVE-2026-121256` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-672
- [Netfoil doesn't decrement TTL](https://agentprime.io/advisories/GHSA-9ppr-wfw9-xvr2.md)
  `GHSA-9ppr-wfw9-xvr2`, `GO-2026-6906` · Go `github.com/tinfoil-factory/netfoil`: affected `>=0.3.0, <0.6.1`, fixed in `0.6.1` · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-672
- [Outline before 1.12.0 Improper Access Control via Public Document Shares](https://agentprime.io/advisories/CVE-2026-120449.md)
  `CVE-2026-120449` · CVE record: Outline Outline · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-672
- [ESPAsyncWebServer multipart parser has null-pointer write](https://agentprime.io/advisories/CVE-2026-62966.md)
  `CVE-2026-62966` · CVE record: ESP32Async ESPAsyncWebServer · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption, CWE-672
- [Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content](https://agentprime.io/advisories/CVE-2026-93006.md)
  `CVE-2026-93006` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-672
- [Race condition in OpenVPN ovpn-dco-win](https://agentprime.io/advisories/CVE-2026-115402.md)
  `CVE-2026-115402` · CVE record: OpenVPN ovpn-dco-win · CVSS 5.7 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Race condition, CWE-672
- [odhcpd DHCPv6 IA dangling first pointer use-after-free](https://agentprime.io/advisories/CVE-2026-53918.md)
  `CVE-2026-53918` · CVE record: openwrt odhcpd · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption, CWE-672
- [Google Chrome: Use of released resource in ContextMenu in Google Chrome on on Android prior to…](https://agentprime.io/advisories/CVE-2026-113121.md)
  `CVE-2026-113121` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-672
- [Google Chrome: Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a…](https://agentprime.io/advisories/CVE-2026-113216.md)
  `CVE-2026-113216` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-672
- [libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE\* handle](https://agentprime.io/advisories/CVE-2026-57446.md)
  `CVE-2026-57446` · CVE record: mz-automation libiec61850 · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption, CWE-664, CWE-672
- [Gitea private repository access retained after rejected transfer](https://agentprime.io/advisories/CVE-2026-96589.md)
  `CVE-2026-96589` · CVE record: Gitea Gitea · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control, CWE-672
- [Google Chrome: Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106345.md)
  `CVE-2026-106345` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-672
- [Google Chrome: Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106310.md)
  `CVE-2026-106310` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-672
- [Google Chrome: Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106320.md)
  `CVE-2026-106320` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-672
- [Google Chrome: Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106339.md)
  `CVE-2026-106339` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-672
- [Google Chrome: Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote…](https://agentprime.io/advisories/CVE-2026-95366.md)
  `CVE-2026-95366` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-672
- [Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches](https://agentprime.io/advisories/CVE-2026-55250.md)
  `CVE-2026-55250` · CVE record: macropay-solutions maravel-framework · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass, CWE-672
- [Google Chrome: Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82…](https://agentprime.io/advisories/CVE-2026-85044.md)
  `CVE-2026-85044` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-672
- [Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS](https://agentprime.io/advisories/CVE-2026-19538.md)
  `CVE-2026-19538` · CVE record: NLnet Labs NSD · CVSS 8.2 High · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass, CWE-672
- [Google Chrome: Operation on a resource after expiration or release in Network in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2026-79010.md)
  `CVE-2026-79010` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-672
- [EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution](https://agentprime.io/advisories/CVE-2026-44725.md)
  `CVE-2026-44725` · CVE record: emqx emqx · CVSS 6.6 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-345, CWE-672
- [BetterDesk has a replay behavior vulnerability when devices are deleted](https://agentprime.io/advisories/CVE-2026-50575.md)
  `CVE-2026-50575` · CVE record: UNITRONIX BetterDesk · CVSS 7.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Authentication bypass, CWE-345, CWE-672
- [dm thin metadata: fix metadata snapshot consistency on commit failure](https://agentprime.io/advisories/CVE-2026-72108.md)
  `CVE-2026-72108` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-672
- [Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider](https://agentprime.io/advisories/CVE-2026-68481.md)
  `CVE-2026-68481` · CVE record: Apache Software Foundation Apache CXF · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-672
- [Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records](https://agentprime.io/advisories/CVE-2026-42955.md)
  `CVE-2026-42955` · CVE record: NLnet Labs Unbound · CVSS 3.7 Low · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-672
- [An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.](https://agentprime.io/advisories/CVE-2026-47087.md)
  `CVE-2026-47087` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.5 Low · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-672
- [nebula-mesh: Certificate revocation is never enforced at the mesh](https://agentprime.io/advisories/GHSA-cm26-5974-52h8.md)
  `GHSA-cm26-5974-52h8`, `CVE-2026-61699`, `GO-2026-5986` · Go `github.com/forgekeep/nebula-mesh`: affected `<0.7.1`, fixed in `0.7.1` · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-299, CWE-672
- [Sylius: Cart FormComponent allows modification or deletion of an already-completed order](https://agentprime.io/advisories/GHSA-5597-7rmh-97q5.md)
  `GHSA-5597-7rmh-97q5`, `CVE-2026-53637`, `PKSA-kjm4-5dkr-g6q7` · Packagist `sylius/sylius`: affected `>=2.0.0, <2.0.18 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.6`, fixed in `2.0.18`, `2.1.15`, `2.2.6` · CVSS 6.5 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-672, CWE-841
- [Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows](https://agentprime.io/advisories/GHSA-2vg6-77g8-24mp.md)
  `GHSA-2vg6-77g8-24mp`, `CVE-2026-67334` · npm `better-auth` and 1 more: affected `>=0.3.4, <1.6.11`, fixed in `1.6.11` · CVSS 5.1 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Authentication bypass, CWE-459, CWE-672
- [Microsoft Edge (Chromium-based) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-58291.md)
  `CVE-2026-58291` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.1 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: CWE-672
- [zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip](https://agentprime.io/advisories/GHSA-2gf8-q9rr-jq3h.md)
  `GHSA-2gf8-q9rr-jq3h`, `CVE-2026-52733` · crates.io `zebrad` and 1 more: affected `<4.5.0`, fixed in `4.5.0` · CVSS 6.5 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-459, CWE-672
- [Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint](https://agentprime.io/advisories/CVE-2026-56314.md)
  `CVE-2026-56314` · CVE record: Capgo Capgo · CVSS 7.1 High · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-672
- [Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse](https://agentprime.io/advisories/GHSA-pw6j-qg29-8w7f.md)
  `GHSA-pw6j-qg29-8w7f`, `CVE-2026-91992` · PyPI `tornado`: affected `<6.5.7`, fixed in `6.5.7` · CVSS 8.2 High · Not analysed yet · Published 15 Jun 2026 · Tags: Information disclosure, CWE-672
- [Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled](https://agentprime.io/advisories/CVE-2026-2379.md)
  `CVE-2026-2379` · CVE record: Arista Networks EOS · CVSS 8.2 High · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-672
- [Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access](https://agentprime.io/advisories/CVE-2026-33463.md)
  `CVE-2026-33463` · CVE record: Elastic Kibana · CVSS 5.3 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-672
- [OCSP responder certificate validity period not checked in public_key](https://agentprime.io/advisories/CVE-2026-42791.md)
  `CVE-2026-42791` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-672
- [Possible arbitrary code execution during DNSSEC validation](https://agentprime.io/advisories/CVE-2026-33278.md)
  `CVE-2026-33278` · CVE record: NLnet Labs Unbound · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption, CWE-672
- [Discourse: Cached outdated summaries can leak removed content](https://agentprime.io/advisories/CVE-2026-32244.md)
  `CVE-2026-32244` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 19 May 2026 · Tags: Information disclosure, CWE-524, CWE-672
- [Mattermost doesn't enforce the PostEditTimeLimit on non-message post fields](https://agentprime.io/advisories/GHSA-hw87-6jcq-9f8q.md)
  `GHSA-hw87-6jcq-9f8q`, `CVE-2026-4053`, `GO-2026-5442` · Go `github.com/mattermost/mattermost-server`: affected `>=0.0.0-20250731163400-5b955468ea1e, <0.0.0-20260414103857-b21ef302025e || >=11.5.0, <11.5.2`, fixed in `0.0.0-20260414103857-b21ef302025e`, `11.5.2` · CVSS 3.1 Low · Not analysed yet · Published 15 May 2026 · Tags: CWE-672
- [Duplicate Advisory: OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload](https://agentprime.io/advisories/GHSA-v8j2-5f9p-fmh4.md)
  `GHSA-v8j2-5f9p-fmh4` · npm `openclaw`: affected `<2026.4.23`, fixed in `2026.4.23` · CVSS 6.0 Medium · Withdrawn · Not analysed yet · Published 11 May 2026 · Tags: CWE-672
- [Apache::Session versions through 1.94 for Perl re-creates deleted sessions](https://agentprime.io/advisories/CVE-2013-10075.md)
  `CVE-2013-10075` · CVE record: CHORNY Apache::Session · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: CWE-672
- [Duplicate Advisory: OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation](https://agentprime.io/advisories/GHSA-m8wm-r5vq-qjpg.md)
  `GHSA-m8wm-r5vq-qjpg` · npm `openclaw`: affected `<2026.4.15`, fixed in `2026.4.15` · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 6 May 2026 · Tags: CWE-672
- [OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload](https://agentprime.io/advisories/GHSA-q8ff-7ffm-m3r9.md)
  `GHSA-q8ff-7ffm-m3r9`, `CVE-2026-45005` · npm `openclaw`: affected `<2026.4.23`, fixed in `2026.4.23` · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2026 · Tags: Authentication bypass, CWE-672
- [OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation](https://agentprime.io/advisories/GHSA-xmxx-7p24-h892.md)
  `GHSA-xmxx-7p24-h892`, `CVE-2026-43585` · npm `openclaw`: affected `<2026.4.15`, fixed in `2026.4.15` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-324, CWE-672
- [Permalink Preview Information Disclosure After Permission Revocation](https://agentprime.io/advisories/CVE-2026-1629.md)
  `CVE-2026-1629` · CVE record: Mattermost Mattermost · CVSS 4.3 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-672
- [Parse Server's MFA recovery codes not consumed after use](https://agentprime.io/advisories/GHSA-4hf6-3x24-c9m8.md)
  `GHSA-4hf6-3x24-c9m8`, `BIT-parse-2026-31875`, `CVE-2026-31875` · npm `parse-server`: affected `<8.6.33 || >=9.0.0-alpha.1, <9.6.0-alpha.7`, fixed in `8.6.33`, `9.6.0-alpha.7` · CVSS 8.2 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-672
- [Heap-use-after-free in CIccCmm::AddXform()](https://agentprime.io/advisories/CVE-2026-30978.md)
  `CVE-2026-30978` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption, CWE-672
- [netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()](https://agentprime.io/advisories/CVE-2026-23111.md)
  `CVE-2026-23111` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 13 Feb 2026 · Tags: Memory corruption, CWE-672
- [Juju has broken CMR authorization in github.com/juju/juju](https://agentprime.io/advisories/GHSA-j477-6vpg-6c8x.md)
  `GHSA-j477-6vpg-6c8x`, `CVE-2026-1237`, `GO-2026-4388` · Go `github.com/juju/juju`: affected `*`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 2 Feb 2026 · Tags: Weak cryptography or TLS, CWE-672
- [Plex Media Server: In Plex Media Server (PMS) through 1.42.2.10156…](https://agentprime.io/advisories/CVE-2025-69415.md)
  `CVE-2025-69415` · CVE record: Plex Media Server · CVSS 7.1 High · Not analysed yet · Published 2 Jan 2026 · Tags: CWE-672
- [Incorrect removal of permissions on PCI device unplug](https://agentprime.io/advisories/CVE-2025-58149.md)
  `CVE-2025-58149` · CVE record: Xen Xen · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-672
- [BIG-IP HTTP/2 vulnerability](https://agentprime.io/advisories/CVE-2025-55669.md)
  `CVE-2025-55669` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-672
- [MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation](https://agentprime.io/advisories/CVE-2025-10060.md)
  `CVE-2025-10060` · CVE record: MongoDB Inc MongoDB Server · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-672
- [io_uring/futex: ensure io_futex_wait() cleans up properly on failure](https://agentprime.io/advisories/CVE-2025-39698.md)
  `CVE-2025-39698` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-672
- [Rust XCB \`xcb::Connection::connect_to_fd\*\` functions violate I/O safety](https://agentprime.io/advisories/GHSA-655h-hg88-5qmf.md)
  `GHSA-655h-hg88-5qmf`, `RUSTSEC-2025-0051` · crates.io `xcb`: affected `<1.6.0`, fixed in `1.6.0` · CVSS 4.0, no score published · Not analysed yet · Published 22 Aug 2025 · Tags: CWE-666, CWE-672
- [Host panic with \`fd_renumber\` WASIp1 function](https://agentprime.io/advisories/GHSA-fm79-3f68-h2fc.md)
  `GHSA-fm79-3f68-h2fc`, `CVE-2025-53901`, `RUSTSEC-2025-0046` · crates.io `wasmtime`: affected `>=10.0.0, <24.0.4 || >=25.0.0, <33.0.2 || >=34.0.0, <34.0.2`, fixed in `24.0.4`, `33.0.2`, `34.0.2` · CVSS 3.5 Low · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-672
- [Insecure device pairing in end of life Amazon Cloud Cam](https://agentprime.io/advisories/CVE-2025-6031.md)
  `CVE-2025-6031` · CVE record: Amazon Cloud Cam · CVSS 7.7 High · Not analysed yet · Published 12 Jun 2025 · Tags: CWE-672
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2025-31253.md)
  `CVE-2025-31253` · CVE record: Apple iOS and iPadOS · CVSS 7.1 High · Not analysed yet · Published 12 May 2025 · Tags: CWE-672
- [Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager](https://agentprime.io/advisories/CVE-2025-2517.md)
  `CVE-2025-2517` · CVE record: OpenText ArcSight Enterprise Security Manager · CVSS 2.3 Low · Not analysed yet · Published 21 Apr 2025 · Tags: CWE-672
- [array-init-cursor is unsound when used with types that implement \`Drop\`](https://agentprime.io/advisories/GHSA-67r5-rqwv-9p9q.md)
  `GHSA-67r5-rqwv-9p9q`, `RUSTSEC-2025-0019` · crates.io `array-init-cursor`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 4.0, no score published · Not analysed yet · Published 31 Mar 2025 · Tags: CWE-672

Older: <https://agentprime.io/advisories/tag/cwe-672.md?cursor=WyIyMDI1LTAzLTMxVDE2OjEzOjM0LjAwMDAwMFoiLCJHSFNBLTY3cjUtcnF3di05cDlxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-672>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-672/>. Everything for agents: <https://agentprime.io/llms.txt>.