Home/CWE/Operation on a Resource after Expiration or Release
Weakness

Operation on a Resource after Expiration or Release

CWE-672 · Class · Draft

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-666 · Operation on Resource in Wrong Phase of Lifetime
Children (more specific)
ParentOfCWE-298 · Improper Validation of Certificate Expiration
ParentOfCWE-324 · Use of a Key Past its Expiration Date
ParentOfCWE-415 · Double Free
ParentOfCWE-416 · Use After Free
ParentOfCWE-613 · Insufficient Session Expiration
ParentOfCWE-825 · Expired Pointer Dereference
ParentOfCWE-910 · Use of Expired File Descriptor
⚠

CVEs With This Weakness

86
A sample of the 86 CVEs tagged with this weakness.
CVECVE-2026-45005
CVECVE-2026-43585
CVECVE-2026-4053
CVECVE-2026-32244
CVECVE-2026-31875
CVECVE-2026-30978
CVECVE-2026-1629
CVECVE-2026-1237
CVECVE-2025-69415
CVECVE-2025-6031
CVECVE-2025-58149
CVECVE-2025-55669
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin