Common Weakness Enumeration
CWE-403 Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
Description
A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-403 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-xr7r-f8xq-vfvv | CVE-2024-21626 | HIGH |
runc vulnerable to container breakout through process.cwd trickery and leaked fds |
2026-07-21 |