CWE-403: File Descriptor Leak
A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.
6 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-40042 — Pachno 1.0.6 Wiki TextParser XML External Entity Injection
- CVE-2026-16526 — Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
- CVE-2024-58280 — CMSimple 5.15 Remote Command Execution via Extensions Configuration
- CVE-2026-33263 — When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused b
Recently published
- CVE-2026-33263 — When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused b
- CVE-2026-16526 — Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
- CVE-2026-40042 — Pachno 1.0.6 Wiki TextParser XML External Entity Injection
- CVE-2024-58280 — CMSimple 5.15 Remote Command Execution via Extensions Configuration