CWE-664 在生命周期中对资源的控制不恰当 类弱点 34 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-664属于资源生命周期管理不当漏洞，指产品未能正确维护资源在创建、使用及释放期间的控制权。攻击者常利用资源状态不一致或释放时机错误，导致内存损坏、数据泄露或拒绝服务。开发者需严格遵循资源管理规范，确保在分配、使用及销毁各阶段实施精确控制，及时清理引用并验证状态，从而消除潜在的安全隐患。
sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-20336 | 思科安全设备软件资源生命周期管理漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 8.8 | High | 2026-09-16 |
| CVE-2026-54251 | Netty OHttp 服务端解码器内存泄漏致拒绝服务 — netty-incubator-codec-ohttp | 8.7 | High | 2026-09-15 |
| CVE-2026-20353 | Cisco Secure Email 资源管理错误漏洞 — Cisco Secure Email | 9.8 | Critical | 2026-09-14 |
| CVE-2026-86203 | PMMP PocketMine-MP 资源管理错误漏洞 — PocketMine-MP | 3.7 | Low | 2026-09-09 |
| CVE-2026-20274 | Cisco IOS XR Software 资源管理错误漏洞 — Cisco IOS XR Software | 9.8 | Critical | 2026-09-02 |
| CVE-2026-79289 | Google Chrome 资源管理错误漏洞 — Chrome | - | - | 2026-08-25 |
| CVE-2026-20269 | Cisco IOS XE Software 资源管理错误漏洞 — Cisco IOS XE Software | 8.6 | High | 2026-08-05 |
| CVE-2026-20158 | Cisco RoomOS Software 资源管理错误漏洞 — Cisco RoomOS Software | 7.5 | High | 2026-07-15 |
| CVE-2025-34226 | OpenPLC Runtime version 3 安全漏洞 — OpenPLC Runtime | 7.1 | High | 2025-10-03 |
| CVE-2025-54621 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 5.3 | Medium | 2025-08-06 |
| CVE-2025-54619 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 5.3 | Medium | 2025-08-06 |
| CVE-2025-54613 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 5.9 | Medium | 2025-08-06 |
| CVE-2025-54612 | Huawei HarmonyOS 安全漏洞 — HarmonyOS | 5.9 | Medium | 2025-08-06 |
| CVE-2024-41169 | Apache Zeppelin 安全漏洞 — Apache Zeppelin | 7.5AI | High AI | 2025-07-12 |
| CVE-2025-21593 | Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS | 6.5 | Medium | 2025-01-09 |
| CVE-2024-45383 | Microsoft High Definition Audio Bus Driver 安全漏洞 — HDAudBus.sys | 5.0 | Medium | 2024-09-12 |
| CVE-2024-37139 | Dell PowerProtect Data Domain 安全漏洞 — PowerProtect DD | 6.5 | Medium | 2024-06-26 |
| CVE-2023-44295 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 6.3 | Medium | 2023-12-05 |
| CVE-2023-44288 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 7.5 | High | 2023-12-05 |
| CVE-2023-25942 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 6.5 | Medium | 2023-04-04 |
| CVE-2022-46144 | Siemens SCALANCE Series 安全漏洞 — SCALANCE SC622-2C | 6.5 | Medium | 2022-12-13 |
| CVE-2022-27518 | Citrix Systems Citrix Gateway 和 Citrix ADC 安全漏洞 — Citrix Gateway, Citrix ADC | 9.8 | Critical | 2022-12-13 |
| CVE-2022-20856 | Cisco IOS XE Wireless Controller software 安全漏洞 — Cisco IOS XE Software | 8.6 | High | 2022-09-30 |
| CVE-2022-31153 | OpenZeppelin 安全漏洞 — cairo-contracts | 6.5 | Medium | 2022-07-15 |
| CVE-2022-27512 | Citrix Application Delivery Management 资源管理错误漏洞 — Citrix Application Delivery Management (Citrix ADM) | 5.3 | - | 2022-06-16 |
| CVE-2022-20748 | Cisco Firepower Threat Defense 资源管理错误漏洞 — Cisco Firepower Threat Defense Software | 5.3 | Medium | 2022-05-03 |
| CVE-2022-1385 | Mattermost 安全漏洞 — Mattermost | 3.7 | Low | 2022-04-19 |
| CVE-2021-1592 | Cisco UCS Manager 资源管理错误漏洞 — Cisco Unified Computing System (Managed) | 4.3 | Medium | 2021-08-25 |
| CVE-2020-3504 | Cisco?UCS Manager Software 资源管理错误漏洞 — Cisco Unified Computing System (Managed) | 3.3 | Low | 2020-08-27 |
| CVE-2020-1622 | Juniper Networks Junos OS Evolved 日志信息泄露漏洞 — Junos OS Evolved | 5.5 | Medium | 2020-04-08 |
CWE-664（在生命周期中对资源的控制不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 34 条 CVE 漏洞。