CWE-1419
13 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- 13Published CVEs13 of them scored
- 7Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-109619
RCE via stale global state
PHP Group · PHP
ExploitedCritical9.2 - CVE-2026-109618
RCE via OOM corruption
PHP Group · PHP
ExploitedCritical9.2