Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-667

773 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 773 in the listAtom feed of new CVEsWhat CWE-667 is, at MITRE (opens in a new tab)
Published CVEs
773
Last 12 months
167
Critical
11
Known exploited
2

Critical 11High 206Medium 542Low 14Not scored 0

CVEs per yearBy the year they were published

  1. 20081
  2. 20096
  3. 20102
  4. 20184
  5. 201922
  6. 202025
  7. 202122
  8. 202242
  9. 202334
  10. 2024237
  11. 2025202
  12. 2026160

Known exploitedNewest addition to KEV first

  • CVE-2025-43510

    A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

    Apple · iOS and iPadOS

    ExploitedHigh7.8
  • CVE-2021-1782

    A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001…

    Apple · iOS and iPadOS

    ExploitedHigh7.0

Newest CVEs

  • CVE-2026-112907

    filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

    tox-dev · filelock

    Low2.5
  • CVE-2026-118052

    Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

    Eclipse Foundation · Eclipse ThreadX

    Medium6.8
  • CVE-2026-61854

    VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

    jackh54 · VoiceSentinel

    High8.2
  • CVE-2026-118593

    Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

    Red Hat · Red Hat Enterprise Linux 10

    Medium5.9
  • CVE-2026-106174

    A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device…

    Fortinet · FortiOS

    Medium6.7
  • CVE-2026-110803

    Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8

    vaadin · framework

    High8.7
  • CVE-2026-111879

    DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock

    DBI

    Medium6.5
  • CVE-2026-107674

    IBM i is Affected by a Denial of Service in Digital Certificate Manager

    IBM · i

    Medium5.1
  • CVE-2026-103670

    Gitea trusted workflow cancellation by unapproved fork runs

    Gitea · Gitea

    High7.5
  • CVE-2026-105113

    Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock

    nezhahq · nezha

    High7.1

Vendors it comes up for most

  1. Linux552
  2. MediaTek, Inc.13
  3. Red Hat9
  4. Google7
  5. Apple6
  6. Cisco6
  7. Xen6
  8. Dell5
  9. Qualcomm, Inc.4
  10. Fedora3