CWE-131

CVEs per yearBy the year they were published

1. 20081
2. 20141
3. 20175
4. 20184
5. 20196
6. 202014
7. 202125
8. 202223
9. 202317
10. 202425
11. 202519
12. 2026103

Known exploitedNewest addition to KEV first

• CVE-2020-17087

  Windows Kernel Local Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1803

  ExploitedHigh7.8

Newest CVEs

• CVE-2026-116788

  FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding

  signalwire · freeswitch

  High8.2
• CVE-2026-116570

  FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication

  signalwire · freeswitch

  High7.5
• CVE-2026-57192

  Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch

  asterisk · asterisk

  Medium6.0
• CVE-2026-112709

  Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

  WatchGuard · Fireware OS

  Critical9.2
• CVE-2026-112710

  Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

  WatchGuard · Fireware OS

  Critical9.2
• CVE-2026-107590

  Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

  qt · Qt

  Low1.9
• CVE-2026-116737

  libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path

  libyal · libphdi

  Medium6.9
• CVE-2026-82944

  Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers

  RT-Labs AB · SOEM

  High8.8
• CVE-2026-97631

  Pre-boot RCE in EDK II PXE driver

  TianoCore · EDK2

  Critical9.5
• CVE-2020-37287

  Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments

  vyperlang · vyper

  High8.2

Vendors it comes up for most

1. Linux21
2. tensorflow12
3. Qualcomm, Inc.11
4. MediaTek, Inc.10
5. Red Hat9
6. FreeRDP8
7. ImageMagick6
8. Huawei5
9. Juniper Networks5
10. F54