KRACK
Key Reinstallation Attack, CVE-2017-13077, disclosed by Mathy Vanhoef in 2017. By replaying message 3 of the 4-way handshake, the client is forced to reinstall an already-in-use key, resetting the packet number and exposing traffic to keystream reuse.