CWE-672.

Google Chrome: Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote…

• Google Chrome
• CWE-672

Netfoil doesn't decrement TTL

• CWE-672

>=0.3.0, <0.6.1 · fixed in 0.6.1

Outline before 1.12.0 Improper Access Control via Public Document Shares

• Outline
• CWE-672

ESPAsyncWebServer multipart parser has null-pointer write

• ESP32Async ESPAsyncWebServer
• Memory corruption
• CWE-672

Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

• Red Hat Ceph Storage 9
• Red Hat Enterprise Linux 10
• CWE-672

Race condition in OpenVPN ovpn-dco-win

• OpenVPN ovpn-dco-win
• Race condition
• CWE-672

odhcpd DHCPv6 IA dangling first pointer use-after-free

• openwrt odhcpd
• Memory corruption
• CWE-672

Google Chrome: Use of released resource in ContextMenu in Google Chrome on on Android prior to…

• Google Chrome
• CWE-672

Google Chrome: Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a…

• Google Chrome
• CWE-672

libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle

• mz-automation libiec61850
• Memory corruption
• CWE-664

Gitea private repository access retained after rejected transfer

• Gitea
• Broken access control
• CWE-672

Google Chrome: Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a…

• Google Chrome
• CWE-672

Google Chrome: Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a…

• Google Chrome
• CWE-672

Google Chrome: Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote…

• Google Chrome
• CWE-672

Google Chrome: Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote…

• Google Chrome
• CWE-672

Google Chrome: Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote…

• Google Chrome
• CWE-672

Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches

• macropay-solutions maravel-framework
• Authentication bypass
• CWE-672

Google Chrome: Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82…

• Google Chrome
• CWE-672

Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS

• NLnet Labs NSD
• Authentication bypass
• CWE-672

Google Chrome: Operation on a resource after expiration or release in Network in Google Chrome prior to…

• Google Chrome
• CWE-672

EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution

• emqx
• CWE-345
• CWE-672

BetterDesk has a replay behavior vulnerability when devices are deleted

• UNITRONIX BetterDesk
• Authentication bypass
• CWE-345

dm thin metadata: fix metadata snapshot consistency on commit failure

• Linux kernel
• CWE-672

Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider

• Apache Software Foundation Apache CXF
• CWE-672

Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records

• NLnet Labs Unbound
• CWE-672

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.

• cyrusimap Cyrus IMAP
• CWE-672

nebula-mesh: Certificate revocation is never enforced at the mesh

• CWE-299
• CWE-672

<0.7.1 · fixed in 0.7.1

Sylius: Cart FormComponent allows modification or deletion of an already-completed order

• CWE-672
• CWE-841

>=2.0.0, <2.0.18 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.6 · fixed in 2.0.18, 2.1.15, 2.2.6

Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows

• Authentication bypass
• CWE-459

>=0.3.4, <1.6.11 · fixed in 1.6.11

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

• Microsoft Edge (Chromium-based)
• CWE-672

zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

• CWE-459
• CWE-672

<4.5.0 · fixed in 4.5.0

Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint

• Capgo
• CWE-672

Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

• Information disclosure
• CWE-672

<6.5.7 · fixed in 6.5.7

Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled

• Arista Networks EOS
• CWE-672

Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access

• Elastic Kibana
• CWE-672

OCSP responder certificate validity period not checked in public_key

• Erlang OTP
• Weak cryptography or TLS
• CWE-672

Possible arbitrary code execution during DNSSEC validation

• NLnet Labs Unbound
• Memory corruption
• CWE-672

Discourse: Cached outdated summaries can leak removed content

• discourse
• Information disclosure
• CWE-524

Mattermost doesn't enforce the PostEditTimeLimit on non-message post fields

• CWE-672

>=0.0.0-20250731163400-5b955468ea1e, <0.0.0-20260414103857-b21ef302025e || >=11.5.0, <11.5.2 · fixed in 0.0.0-20260414103857-b21ef302025e, 11.5.2

Duplicate Advisory: OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload

• CWE-672

<2026.4.23 · fixed in 2026.4.23

Apache::Session versions through 1.94 for Perl re-creates deleted sessions

• CHORNY Apache::Session
• CWE-672

Duplicate Advisory: OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation

• CWE-672

<2026.4.15 · fixed in 2026.4.15

OpenClaw's Webhooks SecretRef route secret remains valid after rotation/reload

• Authentication bypass
• CWE-672

<2026.4.23 · fixed in 2026.4.23

OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation

• CWE-324
• CWE-672

<2026.4.15 · fixed in 2026.4.15

Permalink Preview Information Disclosure After Permission Revocation

• Mattermost
• CWE-672

Parse Server's MFA recovery codes not consumed after use

• CWE-672

<8.6.33 || >=9.0.0-alpha.1, <9.6.0-alpha.7 · fixed in 8.6.33, 9.6.0-alpha.7

Heap-use-after-free in CIccCmm::AddXform()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-672

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

• Linux kernel
• Memory corruption
• CWE-672

Juju has broken CMR authorization in github.com/juju/juju

• Weak cryptography or TLS
• CWE-672

* · no fixed version yet

Plex Media Server: In Plex Media Server (PMS) through 1.42.2.10156…

• Plex Media Server
• CWE-672

Incorrect removal of permissions on PCI device unplug

• Xen
• CWE-672

BIG-IP HTTP/2 vulnerability

• F5 BIG-IP
• CWE-672

MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

• MongoDB Inc MongoDB Server
• CWE-672

io_uring/futex: ensure io_futex_wait() cleans up properly on failure

• Linux kernel
• CWE-672

Rust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety

• CWE-666
• CWE-672

<1.6.0 · fixed in 1.6.0

Host panic with `fd_renumber` WASIp1 function

• CWE-672

>=10.0.0, <24.0.4 || >=25.0.0, <33.0.2 || >=34.0.0, <34.0.2 · fixed in 24.0.4, 33.0.2, 34.0.2

Insecure device pairing in end of life Amazon Cloud Cam

• Amazon Cloud Cam
• CWE-672

This issue was addressed through improved state management.

• Apple iOS and iPadOS
• CWE-672

Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager

• OpenText ArcSight Enterprise Security Manager
• CWE-672

array-init-cursor is unsound when used with types that implement `Drop`

• CWE-672

<0.2.1 · fixed in 0.2.1