Skip to content
CVE Tracker

CWE-770: Allocation of resources without limits

2,730 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 2,730 in the listAtom feed of new CVEsWhat CWE-770 is, at MITRE (opens in a new tab)
Published CVEs
2,730
Last 12 months
1,364
Critical
32
Known exploited
2

Critical 32High 1,293Medium 1,307Low 89Not scored 9

CVEs per yearBy the year they were published

  1. 2019102
  2. 202253
  3. 20224
  4. 202547
  5. 20251
  6. 20261,181
  7. 2026400
  8. 2026305
  9. 2026214
  10. 2026181
  11. 2026151
  12. 202680

Known exploitedNewest addition to KEV first

  • CVE-2020-3569

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

    Cisco · Cisco IOS XR Software

    ExploitedHigh8.6
  • CVE-2020-3566

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    Cisco · Cisco IOS XR Software

    ExploitedHigh8.6

Newest CVEs

  • CVE-2026-116646

    Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.

    Tanium · Threat Response

    Medium4.3
  • CVE-2026-111751

    Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

    angular · angular

    High8.2
  • CVE-2026-63501

    ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

    Agamnentzar · ag-psd

    High7.5
  • CVE-2026-115716

    Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service

    Elastic · APM Server

    Medium6.5
  • CVE-2026-115715

    Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

    Elastic · Elasticsearch

    Medium6.5
  • CVE-2026-108147

    Potential memory exhaustion in MultiPartParser via base64-encoded file upload

    djangoproject · Django

    Medium6.9
  • CVE-2026-118487

    Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser

    Eclipse Foundation · Eclipse Vert.x

    High7.5
  • CVE-2026-118488

    Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client

    Eclipse Foundation · Eclipse Vert.x

    Medium5.9
  • CVE-2026-121412

    FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

    FreeRDP · FreeRDP

    High7.1
  • CVE-2026-121405

    FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

    FreeRDP · FreeRDP

    Medium5.3

Vendors it comes up for most

  1. Apache Software Foundation94
  2. GitLab92
  3. IBM85
  4. Linux59
  5. Red Hat56
  6. Cisco42
  7. Microsoft35
  8. Oracle Corporation34
  9. Elastic31
  10. QNAP Systems Inc.31