CWE-672

CVEs per yearBy the year they were published

1. 20091
2. 20172
3. 20193
4. 202010
5. 20211
6. 202211
7. 20235
8. 202417
9. 202514
10. 202649

Newest CVEs

• CVE-2026-123602

  Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching

  hickory-dns · hickory-dns

  High8.2
• CVE-2026-123282

  In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session

  JetBrains · Datalore

  High7.4
• CVE-2026-121256

  Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…

  Google · Chrome

  High8.3
• CVE-2026-120449

  Outline before 1.12.0 Improper Access Control via Public Document Shares

  Outline · Outline

  Medium6.9
• CVE-2026-62966

  ESPAsyncWebServer multipart parser has null-pointer write

  ESP32Async · ESPAsyncWebServer

  High7.5
• CVE-2026-93006

  Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

  Red Hat · Red Hat Ceph Storage 9

  Medium6.8
• CVE-2026-115402

  OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…

  OpenVPN · ovpn-dco-win

  Medium5.7
• CVE-2026-53918

  odhcpd DHCPv6 IA dangling first pointer use-after-free

  openwrt · odhcpd

  High8.8
• CVE-2026-113121

  Use of released resource in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass…

  Google · Chrome

  High8.8
• CVE-2026-113216

  Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI…

  Google · Chrome

  High8.8

Vendors it comes up for most

1. Linux12
2. Google10
3. IBM4
4. NLnet Labs3
5. Apple2
6. F52
7. Mattermost2
8. Mozilla2
9. OpenClaw2
10. Red Hat2