Common Weakness Enumeration

CWE-833 Deadlock

Description

The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-833 ordered by modification date.

4 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-mf4x-w4gh-4656 CVE-2026-70186 HIGH
nuget/Microsoft.AspNetCore.App.Runtime.linux-arm nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64 nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64 nuget/Microsoft.AspNetCore.App.Runtime.linux-x64 nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64 nuget/Microsoft.AspNetCore.App.Runtime.osx-x64 nuget/Microsoft.AspNetCore.App.Runtime.win-arm64 nuget/Microsoft.AspNetCore.App.Runtime.win-x64 nuget/Microsoft.AspNetCore.App.Runtime.win-x86

Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

 2026-10-13
GHSA-9h59-p45g-445h CVE-2026-33904 MODERATE
golang/github.com/ellanetworks/core

Ella Core has a Denial of Service via SCTP connection cleanup deadlock

2026-03-27
GHSA-qq9f-q439-2574 CVE-2024-8447 MODERATE
maven/org.jboss.narayana.rts/lra-coordinator-jar

Narayana deadlock via multiple join requests sent to LRA Coordinator

 2025-05-15
GHSA-3hg2-r75x-g69m CVE-2023-42441 MODERATE
pypi/vyper

Vyper has incorrect re-entrancy lock when key is empty string

 2024-11-22