CWE-114

28 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 7High 12Medium 8Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2022-23748
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In…
Audinate Dante Application Library for Windows
ExploitedHigh7.8

CVE-2026-94347
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…
Dell · PowerProtect Data Domain Virtual Edition
High7.2
CVE-2026-92939
vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine
patriksimek · vm2
Critical9.4
CVE-2026-26945
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote…
Dell · Integrated Dell Remote Access Controller
Medium5.3
CVE-2026-29046
TinyWeb: HTTP Header Control Character Injection into CGI Environment
maximmasiutin · TinyWeb
Critical9.2
CVE-2025-36250
AIX Code Execution
IBM · AIX
Critical10.0
CVE-2025-36251
AIX Command Execution
IBM · AIX
Critical9.6
CVE-2025-46370
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access…
Dell · Alienware Command Center 6.x (AWCC)
Low3.3
CVE-2025-1950
IBM Hardware Management Console - Power Systems command execution
IBM · Hardware Management Console - Power Systems
Critical9.3
CVE-2024-56347
IBM AIX command execution
IBM · AIX
Critical9.6
CVE-2024-56346
IBM AIX command execution
IBM · AIX
Critical10.0