Skip to content
CVE Tracker

CWE-131

254 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 254 in the listAtom feed of new CVEsWhat CWE-131 is, at MITRE (opens in a new tab)
Published CVEs
254
Last 12 months
104
Critical
43
Known exploited
1

Critical 43High 114Medium 80Low 17Not scored 0

CVEs per yearBy the year they were published

  1. 20081
  2. 20141
  3. 20177
  4. 20183
  5. 202419
  6. 202416
  7. 202422
  8. 202430
  9. 202696
  10. 202620
  11. 202617
  12. 20269

Known exploitedNewest addition to KEV first

  • CVE-2020-17087

    Windows Kernel Local Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1803

    ExploitedHigh7.8

Newest CVEs

  • CVE-2026-57192

    Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch

    asterisk · asterisk

    Medium6.0
  • CVE-2026-112709

    Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

    WatchGuard · Fireware OS

    Critical9.2
  • CVE-2026-112710

    Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

    WatchGuard · Fireware OS

    Critical9.2
  • CVE-2026-107590

    Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

    qt · Qt

    Low1.9
  • CVE-2026-116737

    libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path

    libyal · libphdi

    Medium6.9
  • CVE-2026-82944

    Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers

    RT-Labs AB · SOEM

    High8.8
  • CVE-2026-97631

    Pre-boot RCE in EDK II PXE driver

    TianoCore · EDK2

    Critical9.5
  • CVE-2020-37287

    Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments

    vyperlang · vyper

    High8.2
  • CVE-2026-95111

    Module queue front-send validates a word count as a byte count

    Eclipse Foundation · Eclipse ThreadX

    Medium4.8
  • CVE-2026-112008

    libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr

    libmng · libmng

    Medium6.9

Vendors it comes up for most

  1. Linux21
  2. tensorflow12
  3. Qualcomm, Inc.11
  4. MediaTek, Inc.10
  5. Red Hat9
  6. FreeRDP8
  7. ImageMagick6
  8. Huawei5
  9. Juniper Networks5
  10. F54