Skip to content
CVE Tracker

CWE-118

26 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 26 in the listAtom feed of new CVEsWhat CWE-118 is, at MITRE (opens in a new tab)
Published CVEs
26
Last 12 months
2
Critical
8
Known exploited
0

Critical 8High 9Medium 9Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20173
  2. 20171
  3. 20181
  4. 20181
  5. 20186
  6. 20191
  7. 20202
  8. 20232
  9. 20241
  10. 20244
  11. 20252
  12. 20262

Newest CVEs

  • CVE-2026-113239

    Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML…

    Google · Chrome

    High8.8
  • CVE-2026-50367

    Windows Sensor Data Service Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1809

    High7.8
  • CVE-2025-54628

    Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

    Huawei · HarmonyOS

    Medium5.3
  • CVE-2025-48902

    Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.

    Huawei · HarmonyOS

    Medium6.6
  • CVE-2024-43524

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

    Microsoft · Windows 10 Version 1809

    Medium6.8
  • CVE-2023-37923

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary…

    GTKWave · GTKWave

    High7.8
  • CVE-2023-37922

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary…

    GTKWave · GTKWave

    High7.8
  • CVE-2023-37921

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary…

    GTKWave · GTKWave

    High7.8
  • CVE-2023-0201

    NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may…

    NVIDIA · NVIDIA DGX servers

    Medium6.7
  • CVE-2022-38072

    An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A…

    ADMesh · ADMesh

    Medium6.5

Vendors it comes up for most

  1. GTKWave3
  2. Qualcomm, Inc.3
  3. Cisco2
  4. Huawei2
  5. Microsoft2
  6. ADMesh1
  7. F5 Networks, Inc.1
  8. Google1
  9. ICS-CERT1
  10. Kazuho Oku1