CWE-335

45 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 7High 25Medium 12Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-118765
Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state
randombit · botan
High7.3
CVE-2026-11730
Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
NETGEAR · EX3700
Low2.1
CVE-2026-11702
Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes
DAVIDO · Bytes::Random::Secure::Tiny
High7.5
CVE-2026-11625
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
DAVIDO · Bytes::Random::Secure
High7.5
CVE-2026-41564
CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking
MIK · CryptX
High7.5
CVE-2026-25835
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Product not named
High7.7
CVE-2026-3503
Fault injection attack with ML-DSA and ML-KEM on ARM
wolfSSL Inc. · wolfSSL (wolfCrypt)
Medium4.3
CVE-2025-52578
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical…
Gallagher · High Sec End of Line Module
Medium5.7
CVE-2025-27580
NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed…
NIH · BRICS
High7.5
CVE-2024-10026
Improved Seeding and Hashing In gVisor
Google · gVisor
Medium6.3