CWE-248

CVEs per yearBy the year they were published

1. 20171
2. 20183
3. 20199
4. 20207
5. 20215
6. 202213
7. 202327
8. 202433
9. 202563
10. 2026221

Newest CVEs

• CVE-2026-17426

  This Power System update is being released to address

  IBM · OPENBMC

  Medium6.5
• CVE-2026-123562

  Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection

  sveltejs · devalue

  High8.7
• CVE-2026-123533

  Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File

  GitoxideLabs · gitoxide

  Medium6.8
• CVE-2026-103022

  Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

  urwid · urwid

  Medium5.3
• CVE-2026-80303

  Avast WFP stream parser integer underflow causes system crash

  Gen Digital · Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate

  Not scored
• CVE-2026-12067

  AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers

  Gen Digital · Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security

  Not scored
• CVE-2026-120222

  undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

  undici · undici

  Medium5.9
• CVE-2026-122315

  Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic

  kyverno · kyverno

  High8.7
• CVE-2026-122314

  Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic

  kyverno · kyverno

  High8.7
• CVE-2026-76892

  tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

  tsparticles · tsparticles

  High8.7

Vendors it comes up for most

1. Apache Software Foundation14
2. Cisco13
3. undici12
4. surrealdb11
5. MediaTek, Inc.10
6. Huawei9
7. Elastic6
8. Microsoft6
9. vllm-project6
10. Red Hat5