CWE-909

104 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 3High 36Medium 51Low 14Not scored 0

CVEs per yearBy the year they were published

CVE-2026-113351
libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
libexpat · libexpat
High8.2
CVE-2026-64035
igc: set tx buffer type for SMD frames
Linux · Linux
Critical9.8
CVE-2026-43040
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
Linux · Linux
High7.1
CVE-2026-40687
In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the…
Exim · Exim
Medium4.8
CVE-2025-8117
Account Takeover via Reset Password Functionality in PAD CMS
Polska Akademia Dostępności · PAD CMS
High8.7
CVE-2025-38601
wifi: ath11k: clear initialized flag for deinit-ed srng lists
Linux · Linux
High8.8
CVE-2025-38532
net: libwx: properly reset Rx ring descriptor
Linux · Linux
High7.8
CVE-2025-54410
Moby's Firewalld reload removes bridge network isolation
moby · moby
Low3.3
CVE-2025-54388
Moby's Firewalld reload makes published container ports accessible from remote hosts
moby · moby
Medium5.1
CVE-2022-50169
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
Linux · Linux
High7.1