CWE-674

667 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 8High 322Medium 312Low 25Not scored 0

CVEs per yearBy the year they were published

CVE-2026-124439
Scriban before 7.5.3 Denial of Service via Uncatchable StackOverflowException
scriban · scriban
High8.7
CVE-2026-124078
plist.js before 5.0.1 Uncontrolled Resource Consumption via Binary Parser
TooTallNate · plist.js
High8.7
CVE-2026-123660
Vulnerability-Lookup: memory amplification through webhook payload template format specifiers
vulnerability-lookup · vulnerability-lookup
Medium5.3
CVE-2026-76181
Heap buffer overflow in dBASE index import
The Document Foundation · LibreOffice
Medium5.4
CVE-2026-64860
espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression
espressif · esp-protocols
Medium6.5
CVE-2026-112072
vault-java-driver: stored deeply nested JSON kills every thread that reads it
jopenlibs · vault-java-driver
Medium6.5
CVE-2026-121092
Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
Google · Chrome
High8.8
CVE-2026-63475
isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
isomorphic-git · isomorphic-git
Medium4.3
CVE-2026-115290
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
High7.5
CVE-2026-121423
SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization
surrealdb · surrealdb
High7.1