Cyber Resilience

CWE · MITRE source

CWE-772Missing Release of Resource after Effective Lifetime

Abstraction: Base · CVEs in our corpus: 479

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Last updated: 11 August 2026 21:18 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • SC-10 Network Disconnect
  • ID.AM-08
  • PR.PS-06
  • PR.IR-04
Detect
Catch it (CSF Detect / Respond)
  • DE.CM-09
Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (1)AI-assisted

Control Title Family Why it addresses this CWE
SC-10Network DisconnectSCEnsures network resources are released once the session ends or becomes inactive, closing the window for missing-release weaknesses.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing).

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial). gov = governs / implements (a mandate, not coverage).

T1499.002 Service Exhaustion Flood→P

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2017-14495 8.47.50.84322017-10-03
CVE-2021-22883 8.47.50.74352021-03-03
CVE-2024-2398 8.28.60.36082024-03-27
CVE-2017-11641 7.79.80.02022017-07-26
CVE-2017-14138 7.79.80.02062017-09-04
CVE-2017-15032 7.69.80.01532017-10-05
CVE-2020-12134 7.69.80.01312020-04-24
CVE-2020-35876 7.69.80.01542020-12-31
CVE-2024-20481 KEV 7.55.80.15852024-10-23
CVE-2023-41094 7.410.00.00572023-10-04
CVE-2020-9375 7.37.50.28222020-03-25
CVE-1999-1127 7.07.50.17741999-12-31
CVE-2003-0132 7.00.00.86182003-04-11
CVE-2017-12644 7.08.80.02442017-08-07
CVE-2017-11170 6.98.80.01682017-07-11
CVE-2017-12662 6.98.80.02202017-08-07
CVE-2017-12666 6.98.80.02202017-08-07
CVE-2026-39830 6.99.10.00622026-05-22
CVE-2017-11310 6.88.80.01362017-07-13
CVE-2017-12641 6.88.80.01402017-08-07
CVE-2017-12642 6.88.80.01442017-08-07
CVE-2017-12663 6.88.80.01462017-08-07
CVE-2017-12664 6.88.80.01462017-08-07
CVE-2017-12665 6.88.80.01462017-08-07
CVE-2017-12667 6.88.80.01402017-08-07