Skip to content
CVE Tracker

CWE-123

64 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 64 in the listAtom feed of new CVEsWhat CWE-123 is, at MITRE (opens in a new tab)
Published CVEs
64
Last 12 months
22
Critical
12
Known exploited
2

Critical 12High 36Medium 16Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20172
  2. 20171
  3. 20185
  4. 20191
  5. 20203
  6. 20227
  7. 202411
  8. 20247
  9. 202618
  10. 20269

Known exploitedNewest addition to KEV first

  • CVE-2026-46300

    net: skbuff: preserve shared-frag marker during coalescing

    Linux · Linux

    ExploitedHigh7.8
  • CVE-2025-22225

    VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading…

    VMware ESXi

    ExploitedHigh8.2

Newest CVEs

  • CVE-2026-92372

    Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

    TeamViewer · Full Client

    High8.8
  • CVE-2026-25262

    Write-what-where Condition in Primary Bootloader

    Qualcomm, Inc. · Snapdragon

    Medium6.9
  • CVE-2026-94146

    BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

    BioStar · BIOS Update Utility

    Critical9.3
  • CVE-2026-94142

    BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

    BioStar · Temperature Monitor Utility

    Critical9.3
  • CVE-2026-94129

    BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

    BioStar · VALKYRIE AURORA

    Critical9.3
  • CVE-2026-94128

    BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

    BioStar · VIVID LED DJ

    Critical9.3
  • CVE-2026-48977

    OpenSlide: Arbitrary memory write with crafted Ventana BIF file

    openslide · openslide

    High7.7
  • CVE-2026-81579

    An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

    wibu-systems-ag · wibukey

    High8.8
  • CVE-2026-20469

    In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious…

    MediaTek, Inc. · MediaTek chipset

    Medium5.8
  • CVE-2026-47473

    NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead…

    NVIDIA · TensorRT-LLM

    High7.4

Vendors it comes up for most

  1. Adobe4
  2. BioStar4
  3. Cisco4
  4. Linux4
  5. MediaTek, Inc.4
  6. AMI3
  7. AMD1
  8. AUVESY1
  9. Acronis1
  10. Eclipse1