CWE-617: Reachable assertion

CVEs per yearBy the year they were published

1. 20151
2. 20162
3. 201745
4. 201827
5. 201939
6. 202033
7. 202177
8. 2022148
9. 202370
10. 202463
11. 2025141
12. 2026303

Known exploitedNewest addition to KEV first

• CVE-2015-5477

  named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon…

  Product not named

  ExploitedHigh7.5

Newest CVEs

• CVE-2026-124465

  Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic

  Trendyol · kafka-konsumer

  High7.1
• CVE-2026-123557

  Zebra zebrad before 7.0.0 Reachable Assertion DoS via Peer Disconnection

  ZcashFoundation · zebra

  High8.2
• CVE-2026-120749

  Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus

  Red Hat · Red Hat Enterprise Linux 10

  Medium6.2
• CVE-2026-121960

  FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest

  FreeRDP · FreeRDP

  High8.7
• CVE-2026-121951

  FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event

  FreeRDP · FreeRDP

  High8.7
• CVE-2026-120956

  remote abort and memory disclosure from a malformed cursor.ns

  MongoDB · C Driver

  High7.1
• CVE-2026-121409

  FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

  FreeRDP · FreeRDP

  High8.2
• CVE-2026-121406

  FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload

  FreeRDP · FreeRDP

  Medium5.3
• CVE-2026-121396

  FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion

  FreeRDP · FreeRDP

  Medium5.3
• CVE-2026-121395

  FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder

  FreeRDP · FreeRDP

  High7.1

Vendors it comes up for most

1. Linux107
2. Qualcomm, Inc.70
3. tensorflow61
4. ISC43
5. Juniper Networks30
6. MediaTek, Inc.28
7. MongoDB22
8. FreeRDP20
9. Red Hat19
10. Pexip10