CWE-824

CVEs per yearBy the year they were published

1. 20151
2. 20162
3. 20173
4. 201819
5. 201910
6. 202020
7. 202142
8. 202241
9. 202346
10. 202430
11. 202532
12. 202649

Known exploitedNewest addition to KEV first

• CVE-2026-109619

  RCE via stale global state

  PHP Group · PHP

  ExploitedCritical9.2
• CVE-2026-109618

  RCE via OOM corruption

  PHP Group · PHP

  ExploitedCritical9.2
• CVE-2022-21971

  Windows Runtime Remote Code Execution Vulnerability

  Microsoft · Windows 10 Version 1809

  ExploitedHigh7.8
• CVE-2015-1770

  Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized…

  Product not named

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-47738

  liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMs

  open-quantum-safe · liboqs

  Medium5.3
• CVE-2026-117969

  Invalid pointer in the JavaScript Engine: JIT component

  Mozilla · Firefox

  High8.8
• CVE-2026-117956

  Invalid pointer in the Nimbus Desktop Client component

  Mozilla · Firefox

  High8.8
• CVE-2026-117937

  Invalid pointer in the JavaScript Engine component

  Mozilla · Firefox

  High7.3
• CVE-2026-117917

  Invalid pointer in the Graphics: WebRender component

  Mozilla · Firefox

  Critical9.8
• CVE-2026-117910

  Invalid pointer in the JavaScript Engine component

  Mozilla · Firefox

  High7.3
• CVE-2026-117871

  Invalid pointer in the Graphics component

  Mozilla · Firefox

  High7.3
• CVE-2026-115327

  libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser

  CESNET · libyang

  Medium6.0
• CVE-2026-109619

  RCE via stale global state

  PHP Group · PHP

  ExploitedCritical9.2
• CVE-2026-109618

  RCE via OOM corruption

  PHP Group · PHP

  ExploitedCritical9.2

Vendors it comes up for most

1. Adobe47
2. Mozilla18
3. Siemens15
4. tensorflow14
5. Linux13
6. Qualcomm, Inc.7
7. Foxit6
8. Horner Automation6
9. Ansys5
10. Juniper Networks5