Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-203

843 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 843 in the listAtom feed of new CVEsWhat CWE-203 is, at MITRE (opens in a new tab)
Published CVEs
843
Last 12 months
152
Critical
24
Known exploited
1

Critical 24High 126Medium 594Low 98Not scored 1

CVEs per yearBy the year they were published

  1. 20131
  2. 20161
  3. 201713
  4. 201820
  5. 201954
  6. 202066
  7. 202189
  8. 2022107
  9. 2023134
  10. 2024122
  11. 202577
  12. 2026139

Known exploitedNewest addition to KEV first

  • CVE-2024-39891

    In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain…

    Product not named

    ExploitedMedium5.3

Newest CVEs

  • CVE-2026-124425

    Parse Server 9.10.6-alpha.1 before 9.10.7-alpha.2 Information Disclosure via Save Response

    parse-community · parse-server

    Low2.3
  • CVE-2026-103021

    OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading

    openemr · openemr

    Medium5.3
  • CVE-2026-19134

    A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. This issue affects OpenText Directory Services (OTDS):…

    OpenText · OpenText Directory Services (OTDS)

    High7.1
  • CVE-2026-121130

    Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…

    Google · Chrome

    Medium5.3
  • CVE-2026-121138

    Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…

    Google · Chrome

    Medium6.5
  • CVE-2026-121223

    Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…

    Google · Chrome

    Not scored
  • CVE-2026-121187

    Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page.…

    Google · Chrome

    Medium5.3
  • CVE-2026-58945

    In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure…

    Google · Android

    Medium4.3
  • CVE-2026-114199

    Gitea contribution heatmap private activity disclosure to public-only tokens

    Gitea · Gitea

    Medium5.3
  • CVE-2026-118338

    Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…

    Google · Chrome

    High8.8

Vendors it comes up for most

  1. Google104
  2. IBM25
  3. Mozilla24
  4. Red Hat11
  5. AMD9
  6. Honor9
  7. wolfSSL9
  8. Apple8
  9. Jenkins project8
  10. Oracle Corporation8