CWE-833: Deadlock
The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.
21 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-10150 — Webserver crash caused by scanning on TCP port 80
- CVE-2024-47506 — Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash
- CVE-2025-54796 — Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
- CVE-2026-33904 — Ella Core has a Denial of Service via SCTP connection cleanup deadlock
- CVE-2025-36010 — IBM Db2 for Linux denial of service
- CVE-2026-70616 — boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint
- CVE-2024-29172 — Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attack
- CVE-2026-47334 — Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling
- CVE-2026-10647 — Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure
- CVE-2025-59463 — Denial-of-service (DoS) via chunk size mismatch
- CVE-2025-8312 — Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its
Recently published
- CVE-2026-70616 — boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint
- CVE-2026-10647 — Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure
- CVE-2026-47334 — Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling
- CVE-2026-33904 — Ella Core has a Denial of Service via SCTP connection cleanup deadlock
- CVE-2025-10150 — Webserver crash caused by scanning on TCP port 80
- CVE-2025-59463 — Denial-of-service (DoS) via chunk size mismatch
- CVE-2025-54796 — Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
- CVE-2025-8312 — Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its
- CVE-2025-36010 — IBM Db2 for Linux denial of service
- CVE-2024-29172 — Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attack
- CVE-2024-47506 — Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash