Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-772

527 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 527 in the listAtom feed of new CVEsWhat CWE-772 is, at MITRE (opens in a new tab)
Published CVEs
527
Last 12 months
95
Critical
7
Known exploited
1

Critical 7High 186Medium 314Low 20Not scored 0

CVEs per yearBy the year they were published

  1. 20157
  2. 201613
  3. 2017170
  4. 2018116
  5. 201924
  6. 202014
  7. 202116
  8. 202217
  9. 20238
  10. 202420
  11. 202518
  12. 202692

Known exploitedNewest addition to KEV first

  • CVE-2024-20481

    A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…

    Cisco · Cisco Adaptive Security Appliance (ASA) Software

    ExploitedMedium5.8

Newest CVEs

  • CVE-2026-119636

    Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an…

    Devolutions · Server

    High8.8
  • CVE-2026-121391

    FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE

    FreeRDP · FreeRDP

    Medium5.3
  • CVE-2026-115215

    NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool

    Eclipse Foundation · Eclipse ThreadX

    High8.7
  • CVE-2026-90870

    Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server

    Progress Software · WS_FTP Server

    Medium5.3
  • CVE-2026-115793

    Resource exhaustion from RPC sessions kept for requests to unknown interface

    RT-Labs · P-Net

    High8.7
  • CVE-2026-112200

    Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness

    RT-Labs · P-Net

    High8.7
  • CVE-2026-118262

    Echo: WebSocket proxy can retain connections and handlers after client disconnect

    labstack · echo

    High8.2
  • CVE-2026-81039

    Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identity

    zephyrproject · zephyr

    Medium4.3
  • CVE-2026-114236

    Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

    Red Hat · Confidential Compute Attestation

    Low3.3
  • CVE-2026-95108

    Deleting a user-mode module thread leaks its privileged kernel stack

    Eclipse Foundation · Eclipse ThreadX

    Medium6.8

Vendors it comes up for most

  1. Linux24
  2. Huawei Technologies Co., Ltd.19
  3. Cisco13
  4. Red Hat12
  5. Apache Software Foundation10
  6. Juniper Networks8
  7. Google Inc.7
  8. Eclipse Foundation5
  9. IBM5
  10. netty5