Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-404

875 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 6 of them as exploited in the wild.

All 875 in the listAtom feed of new CVEsWhat CWE-404 is, at MITRE (opens in a new tab)
Published CVEs
875
Last 12 months
335
Critical
4
Known exploited
6

Critical 4High 199Medium 583Low 89Not scored 0

CVEs per yearBy the year they were published

  1. 20101
  2. 20151
  3. 201715
  4. 201842
  5. 201920
  6. 202034
  7. 202118
  8. 202284
  9. 202382
  10. 202495
  11. 2025161
  12. 2026322

Known exploitedNewest addition to KEV first

  • CVE-2018-8639

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…

    Microsoft · Windows 7

    ExploitedHigh8.4
  • CVE-2018-8611

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…

    Microsoft · Windows 7

    ExploitedHigh7.8
  • CVE-2018-8405

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…

    Microsoft · Windows Server 2012 R2

    ExploitedHigh7.8
  • CVE-2018-8406

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…

    Microsoft · Windows Server 2016

    ExploitedHigh7.8
  • CVE-2018-8120

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…

    Microsoft · Windows Server 2008

    ExploitedHigh7.0
  • CVE-2017-6627

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to…

    Cisco IOS and Cisco IOS XE

    ExploitedHigh7.5

Newest CVEs

  • CVE-2026-123964

    OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop

    OpenBMB · Internet of Agents

    Medium5.3
  • CVE-2026-123748

    chenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumption

    chenyme · grok2api

    Medium5.3
  • CVE-2026-122020

    NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of service

    NST Labs Tech · Nstbrowser

    Medium5.3
  • CVE-2026-121261

    phpMyAdmin ShapeFile SHP File loadFromFile infinite loop

    phpMyAdmin · ShapeFile

    Medium5.3
  • CVE-2026-120237

    ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption

    ag-ui-protocol · ag-ui

    Medium5.3
  • CVE-2026-120235

    ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption

    ag-ui-protocol · ag-ui

    Medium5.3
  • CVE-2026-120234

    ag-ui-protocol ag-ui HTTP Transport e.text resource consumption

    ag-ui-protocol · ag-ui

    Medium5.3
  • CVE-2026-118276

    a2ui-project a2ui Parser expression_parser.ts formatString resource consumption

    a2ui-project · a2ui

    Medium5.1
  • CVE-2026-118275

    a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption

    a2ui-project · a2ui

    Medium6.9
  • CVE-2026-118274

    a2ui-project a2ui Binder generic-binder.ts resource consumption

    a2ui-project · a2ui

    Medium5.3

Vendors it comes up for most

  1. Microsoft37
  2. Linux27
  3. GNU25
  4. Oracle Corporation23
  5. IObit18
  6. Axiomatic12
  7. Cisco12
  8. ASR8
  9. Juniper Networks8
  10. Apache Software Foundation7