CWE-641
19 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 19Published CVEs19 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-85864
Python Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8 - CVE-2026-20282
Cisco Identity Services Engine Authenticated Write Vulnerability
Cisco · Cisco Identity Services Engine Software
Medium4.9 - CVE-2026-46581
In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker…
Eclipse Foundation · Eclipse Mojarra
High7.5 - CVE-2026-50510
GitHub Copilot Remote Code Execution Vulnerability
Microsoft · GitHub Copilot Plugin for JetBrains IDEs
High7.8 - CVE-2026-50023
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
yt-dlp · yt-dlp
High8.3 - CVE-2026-27140
Code execution vulnerability in SWIG code generation in cmd/go
Go toolchain · cmd/go
High8.8 - CVE-2019-25623
Luminance Studio 2.17 Denial of Service via Malformed Input
Pixarra · Luminance Studio
Medium6.9 - CVE-2026-25177
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High8.8 - CVE-2025-47173
Microsoft Office Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High7.8 - CVE-2025-47953
Microsoft Office Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.4