CWE-253
26 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 26Published CVEs26 of them scored
- 11Last 12 monthspublished in the last year
- 2Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103932
ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match
owasp-modsecurity · ModSecurity
Medium5.8 - CVE-2026-15686
Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability
Adminer · Adminer
High7.2 - CVE-2026-59847
Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
Red Hat · Red Hat Enterprise Linux 10
Medium5.9 - CVE-2026-53090
bpf: Fix ld_{abs,ind} failure path analysis in subprogs
Linux · Linux
High7.8 - CVE-2026-5818
MCU Firmware Update Authentication Bypass on Caliptra Core
Caliptra · Core Runtime Firmware
High7.2 - CVE-2026-46419
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to…
Yubico · webauthn-server-core
High7.5 - CVE-2026-43863
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
mutt · mutt
Low3.7 - CVE-2026-35340
uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode
Uutils · coreutils
Medium5.5 - CVE-2026-35339
uutils coreutils chmod False Success Exit Code in Recursive Mode
Uutils · coreutils
Medium5.5 - CVE-2026-35091
Corosync: corosync: denial of service and information disclosure via crafted udp packet
Red Hat · Red Hat Enterprise Linux 10
High8.2