Cyber Resilience

CWE · MITRE source

CWE-672Operation on a Resource after Expiration or Release

Abstraction: Class · CVEs in our corpus: 81

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Last updated: 04 July 2026 08:17 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 4 mapping(s) from 1 framework(s): ATT&CK 4 (partial)

See the full cumulative-coverage rollup →

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.

Direction: other covers this; this covers other (F/M/P = full / mostly / partial).

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2024-23638 UPD8.06.50.60052024-01-24
CVE-2020-120437.09.80.02082020-06-29
CVE-2019-176387.09.40.11142020-07-09
CVE-2020-240307.09.80.02672020-09-02
CVE-2023-410947.010.00.00572023-10-04
CVE-2013-10075 UPD7.09.10.00362026-05-08
CVE-2026-33278 UPD7.09.80.01272026-05-20
CVE-2020-110276.06.10.13632020-04-30
CVE-2009-35475.57.00.04932009-11-04
CVE-2017-05445.57.80.00862017-04-07
CVE-2017-148955.57.80.00272017-12-05
CVE-2019-156915.57.20.04722019-12-26
CVE-2019-157915.57.10.01322020-04-24
CVE-2019-157945.57.10.01162020-04-24
CVE-2020-252215.57.80.00672020-09-10
CVE-2020-135305.57.50.02062020-12-11
CVE-2021-239955.58.80.01212021-06-24
CVE-2021-371855.57.50.02062022-02-09
CVE-2021-372045.57.50.02182022-02-09
CVE-2022-223325.57.50.00732022-04-01
CVE-2021-330205.58.20.00602022-04-01
CVE-2022-221975.57.50.01072022-04-14
CVE-2022-302565.57.50.00892022-11-19
CVE-2022-227555.58.80.00592022-12-22
CVE-2023-343265.57.80.00292024-01-05