CWE-67
7 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102598
Werkzeug safe_join() allows Windows special device names
pallets · werkzeug
Medium6.3 - CVE-2026-17545
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
PHP Group · PHP
Medium6.9 - CVE-2026-27199
Werkzeug safe_join() allows Windows special device names
pallets · werkzeug
Medium6.3 - CVE-2026-21860
Werkzeug safe_join() allows Windows special device names with compound extensions
pallets · werkzeug
Medium6.3 - CVE-2025-66221
Werkzeug safe_join() allows Windows special device names
pallets · werkzeug
Medium6.3 - CVE-2024-51745
Wasmtime doesn't fully sandbox all the Windows device filenames
bytecodealliance · wasmtime
Low2.3 - CVE-2024-35197
gix refs and paths with reserved Windows device names access the devices
Byron · gitoxide
Medium5.4