CWE-770: Allocation of resources without limits

2,778 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

Critical 33High 1,329Medium 1,321Low 91Not scored 4

CVEs per yearBy the year they were published

CVE-2020-3569
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
Cisco · Cisco IOS XR Software
ExploitedHigh8.6
CVE-2020-3566
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Cisco · Cisco IOS XR Software
ExploitedHigh8.6

CVE-2026-16697
This Power System update is being released to address
IBM · OPENBMC
Medium6.5
CVE-2026-93005
Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
IBM · Process Mining
Medium6.5
CVE-2026-124553
BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsing
funstory-ai · BabelDOC
High8.7
CVE-2026-123610
rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression
rustls · rustls
Medium6.3
CVE-2026-123577
Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service
hickory-dns · hickory-dns
High8.7
CVE-2026-123576
Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests
hickory-dns · hickory-dns
High8.7
CVE-2026-123575
Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies
hickory-dns · hickory-dns
High8.7
CVE-2026-123569
Devalue before 5.6.3 Denial of Service via Sparse Array Serialization
sveltejs · devalue
High8.7
CVE-2026-123564
Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays
sveltejs · devalue
High8.7
CVE-2026-123543
OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation
OpenIdentityPlatform · OpenAM
High8.7