CWE-822
308 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 5 of them as exploited in the wild.
- Published CVEs
- 308
- Last 12 months
- 159
- Critical
- 17
- Known exploited
- 5
Critical 17High 222Medium 65Low 4Not scored 0
CVEs per yearBy the year they were published
- 20171
- 20186
- 20192
- 20203
- 202115
- 20225
- 202321
- 202453
- 202557
- 2026145
Known exploitedNewest addition to KEV first
- CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8 - CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh8.4 - CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8
Newest CVEs
- CVE-2026-121996
Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
Red Hat · Red Hat Enterprise Linux 10
High8.2 - CVE-2026-113780
ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary
espressif · esp-idf
Critical9.3 - CVE-2026-87041
Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory
zephyrproject · zephyr
High7.8 - CVE-2026-16511
Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory
zephyrproject · zephyr
High8.8 - CVE-2026-115653
Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode
Eclipse Foundation · Eclipse ThreadX
High7.0 - CVE-2026-88781
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…
ASUS · motherboards firmware
Medium6.8 - CVE-2026-19676
PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode
zephyrproject · zephyr
High7.8 - CVE-2026-110322
HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
HMS Networks · PEAK-System Device Driver Setup
Medium6.8 - CVE-2026-19595
Zephyr RTIO syscall verifier validates output parameters for read instead of write access
zephyrproject · zephyr
Medium6.1 - CVE-2026-108435
Microsoft Office Word Information Disclosure Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
Medium6.5