CWE-281
351 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 351
- Last 12 months
- 36
- Critical
- 28
- Known exploited
- 1
Critical 28High 162Medium 133Low 25Not scored 3
CVEs per yearBy the year they were published
- 20071
- 20141
- 201722
- 20184
- 201913
- 202032
- 202128
- 202239
- 202343
- 202477
- 202552
- 202636
Known exploitedNewest addition to KEV first
- CVE-2017-8543
Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1…
Microsoft Corporation · Microsoft Windows
ExploitedCritical9.8
Newest CVEs
- CVE-2026-48183
Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
Samsung Semiconductor · Exynos 1480
Not scored - CVE-2025-10149
Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover
WSO2 · WSO2 Identity Server as Key Manager
High8.2 - CVE-2026-101306
Multiple jail filesystem root escapes
FreeBSD · FreeBSD
Critical9.8 - CVE-2026-47596
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the…
NVIDIA · GeForce
High7.0 - CVE-2026-47599
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper…
NVIDIA · GeForce
High7.8 - CVE-2026-47595
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the…
NVIDIA · GeForce
High7.8 - CVE-2026-47489
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A…
NVIDIA · GeForce
High7.8 - CVE-2026-93658
uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid
uutils · coreutils
High7.3 - CVE-2026-61709
OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user
openfga · openfga
Medium5.3 - CVE-2026-82964
Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys
Gen Digital · Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security
High8.8