CWE-833

CWE-833 · 8 records · 5 with a public proof-of-concept

Records the NVD classes under CWE-833, highest CVSS first.

  1. HIGH 7.5CVE-2026-70186

    Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.5CVE-2026-103558

    Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.5CVE-2026-46352public PoC

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic con…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 6.5CVE-2026-105792public PoC

    Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires a n…

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.5CVE-2026-77798public PoC

    Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module.

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 5.5CVE-2026-125220public PoC

    FFmpeg through 9.0.2 contains a deadlock vulnerability in mimic_decode_frame() in libavcodec/mimic.c that fails to report frame progress when init_get_bits8() fails. Attackers can supply a crafted file with an oversized Mimic intra frame followed by inter fram…

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-118052public PoC

    In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such a…

    AI risk analysis on Exploit-DB.ai →

  8. UNSCOREDCVE-2026-105390

    Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.

    AI risk analysis on Exploit-DB.ai →