CWE-754
697 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 5 of them as exploited in the wild.
- Published CVEs
- 697
- Last 12 months
- 224
- Critical
- 28
- Known exploited
- 5
Critical 28High 286Medium 327Low 48Not scored 8
CVEs per yearBy the year they were published
- 20141
- 201712
- 20187
- 201936
- 202050
- 202158
- 202263
- 202365
- 2024108
- 202583
- 2026214
Known exploitedNewest addition to KEV first
- CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
Linux · Linux
ExploitedCritical9.8 - CVE-2024-3393
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
Palo Alto Networks · Cloud NGFW
ExploitedHigh8.7 - CVE-2023-41993
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is…
Apple · macOS
ExploitedHigh8.8 - CVE-2023-41992
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be…
Apple · macOS
ExploitedHigh7.8 - CVE-2021-3560
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user.…
polkit
ExploitedHigh7.8
Newest CVEs
- CVE-2026-123588
Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool
hickory-dns · hickory-dns
High8.7 - CVE-2026-48186
Improper handling of messages before AS security activation can cause unexpected behavior
Samsung Semiconductor · Exynos 1280
Not scored - CVE-2026-69006
Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
Samsung Semiconductor · Exynos 850
Not scored - CVE-2026-69066
Memory corruption in GPU driver due to improper validation of VMID reservation.
Samsung Semiconductor · Exynos 2200
Not scored - CVE-2025-66368
Incorrect handling of SDP payload leads to a Denial of Service
Samsung Semiconductor · Exynos 1080
Not scored - CVE-2026-35495
In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
Samsung Semiconductor · Exynos 1080
Not scored - CVE-2025-66365
Incorrect handling of SIP packets leads to baseband crashes
Samsung Semiconductor · Exynos 1080
Not scored - CVE-2025-66364
Continuously sending control‑plane messages causes the baseband to crashes.
Samsung Semiconductor · Exynos 850
Not scored - CVE-2026-121054
Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…
Google · Chrome
High8.8 - CVE-2026-121237
Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access…
Google · Chrome
Not scored