CWE-829
411 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 411
- Last 12 months
- 236
- Critical
- 71
- Known exploited
- 3
Critical 71High 237Medium 89Low 13Not scored 1
CVEs per yearBy the year they were published
- 20042
- 20101
- 20172
- 201811
- 201916
- 202012
- 202126
- 202222
- 202321
- 202424
- 202547
- 2026227
Known exploitedNewest addition to KEV first
- CVE-2026-111357
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root,…
Ivanti · Connect Secure
ExploitedHigh7.0 - CVE-2026-0770
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Langflow · Langflow
ExploitedCritical9.8 - CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Sudo project · Sudo
ExploitedCritical9.3
Newest CVEs
- CVE-2026-123858
In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects
JetBrains · PhpStorm
Medium4.4 - CVE-2026-123854
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
JetBrains · PyCharm
Medium5.5 - CVE-2026-123853
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process
JetBrains · IntelliJ IDEA
High7.8 - CVE-2026-123849
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers
JetBrains · IntelliJ IDEA
High7.0 - CVE-2026-123843
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
JetBrains · IntelliJ IDEA
Low3.3 - CVE-2026-123838
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
JetBrains · IntelliJ IDEA
High7.8 - CVE-2026-123833
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
JetBrains · IntelliJ IDEA
Low3.6 - CVE-2026-123832
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
JetBrains · CLion
Critical9.6 - CVE-2026-123831
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
JetBrains · CLion
Critical9.6 - CVE-2026-64894
Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software…
Johnson Controls · EasyIO Neo IOManager and Tools Installer
High7.3