CWE-400: Uncontrolled resource consumption

4,221 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 8 of them as exploited in the wild.

Critical 67High 2,086Medium 1,931Low 132Not scored 5

CVEs per yearBy the year they were published

CVE-2026-28318
SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
SolarWinds · Serv-U
ExploitedHigh7.5
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Microsoft · Microsoft Defender Antimalware Platform
ExploitedMedium4.0
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
Product not named
ExploitedHigh7.5
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Microsoft · .NET 6.0
ExploitedHigh7.5
CVE-2004-1464
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection…
Product not named
ExploitedMedium5.9
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Apache Software Foundation · Apache Log4j2
ExploitedCritical10.0
CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
Cisco · Cisco IOS XR Software
ExploitedHigh8.6
CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Cisco · Cisco IOS XR Software
ExploitedHigh8.6

CVE-2026-124437
Scriban before 7.5.3 Denial of Service via Unguarded Builtins and Recursion
scriban · scriban
High8.7
CVE-2026-123606
Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification
hickory-dns · hickory-dns
High8.7
CVE-2026-123586
Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals
hickory-dns · hickory-dns
High8.7
CVE-2026-123585
Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records
hickory-dns · hickory-dns
Medium6.9
CVE-2026-123570
Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts
hickory-dns · hickory-dns
High8.7
CVE-2026-123566
Devalue before 5.9.3 CPU Amplification Denial of Service via uneval
sveltejs · devalue
High8.7
CVE-2026-123565
Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval
sveltejs · devalue
High8.7
CVE-2026-123531
Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter
go-vikunja · vikunja
High8.7
CVE-2026-123514
Vikunja before 2.7.1 Orphaned Export Archives Enable Disk Exhaustion
go-vikunja · vikunja
Medium5.3
CVE-2026-123501
Vikunja before 2.7.1 Memory Exhaustion DoS via Unbounded Image Decodes
go-vikunja · vikunja
High7.1