Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-118

26 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 26 in the listAtom feed of new CVEsWhat CWE-118 is, at MITRE (opens in a new tab)
Published CVEs
26
Last 12 months
2
Critical
8
Known exploited
0

Critical 8High 9Medium 9Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20174
  2. 20188
  3. 20191
  4. 20202
  5. 20221
  6. 20232
  7. 20244
  8. 20252
  9. 20262

Newest CVEs

  • CVE-2026-113239

    Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML…

    Google · Chrome

    High8.8
  • CVE-2026-50367

    Windows Sensor Data Service Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1809

    High7.8
  • CVE-2025-54628

    Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

    Huawei · HarmonyOS

    Medium5.3
  • CVE-2025-48902

    Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.

    Huawei · HarmonyOS

    Medium6.6
  • CVE-2024-43524

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

    Microsoft · Windows 10 Version 1809

    Medium6.8
  • CVE-2023-37923

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary…

    GTKWave · GTKWave

    High7.8
  • CVE-2023-37922

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary…

    GTKWave · GTKWave

    High7.8
  • CVE-2023-37921

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary…

    GTKWave · GTKWave

    High7.8
  • CVE-2023-0201

    NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may…

    NVIDIA · NVIDIA DGX servers

    Medium6.7
  • CVE-2022-38072

    An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A…

    ADMesh · ADMesh

    Medium6.5

Vendors it comes up for most

  1. GTKWave3
  2. Qualcomm, Inc.3
  3. Cisco2
  4. Huawei2
  5. Microsoft2
  6. ADMesh1
  7. F5 Networks, Inc.1
  8. Google1
  9. ICS-CERT1
  10. Kazuho Oku1