Base weakness
Draft
CWE-413: Improper Resource Locking
The product does not lock or does not correctly lock a resource when the product must have exclusive access to the resource.
Last updated
15
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
When a resource is not properly locked, an attacker could modify the resource while it is being operated on by the product. This might violate the product's assumption that the resource will not change, potentially leading to unexpected behaviors.
Real-world CVEs
15 recorded CVEs are caused by CWE-413 (Improper Resource Locking). The highest-severity and most recent are shown first. 3 new CWE-413 CVEs have been recorded so far in 2026 (4 in 2025).