Falhas do tipo CWE-413
15 resultadosBloqueio inadequado de recursos
Ocorre quando código acessa ou modifica um recurso compartilhado (arquivo, memória, banco de dados) sem garantir que apenas uma thread ou processo o faça por vez. Isso causa condições de corrida, corrupção de dados ou comportamento imprevisível.
Exemplo
Uma aplicação web atualiza o saldo de uma conta sem usar locks: duas requisições simultâneas leem o mesmo saldo, decrementam valores diferentes e gravam de volta, perdendo uma das transações ou gerando inconsistência financeira.
Como mitigar
Use mecanismos de sincronização apropriados: mutexes, semáforos, transações com isolamento no banco de dados ou operações atômicas. Revise seções críticas do código que acessem estado compartilhado e garanta exclusão mútua.
CVE-2026-32748HIGHSquid has Denial of Service in ICP Response handlingEPSS 8.9%CVE-2019-17102HIGHBitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)EPSS 1.9%CVE-2022-24946HIGHImproper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi EleEPSS 1.6%CVE-2022-20678HIGHCisco IOS XE Software AppNav-XE Denial of Service VulnerabilityEPSS 0.9%CVE-2023-28649HIGHThe Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability existsEPSS 0.5%CVE-2023-33951MEDIUMKernel: vmwgfx: race condition leading to information disclosure vulnerabilityEPSS 0.3%CVE-2022-49737HIGHIn X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various dataEPSS 0.3%CVE-2023-32253MEDIUMKernel: deadlock in ksmbd_find_crypto_ctx()EPSS 0.3%CVE-2025-3450CRITICALAutomation Runtime SDM requests may impact systemEPSS 0.3%CVE-2026-44608MEDIUMUse after free and crash under special conditions in RPZ codeEPSS 0.3%CVE-2023-2269—A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dmEPSS 0.2%CVE-2019-8998HIGHAn information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) ofEPSS 0.2%CVE-2025-69198MEDIUMPterodactyl's improper resource locking allows raced queries to create more resources than allotedEPSS 0.2%CVE-2025-0003HIGHInadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in EPSS 0.2%CVE-2023-2430MEDIUMA vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows EPSS 0.2%