CWE-134

425 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 5 of them as exploited in the wild.

Critical 49High 224Medium 127Low 24Not scored 1

CVEs per yearBy the year they were published

CVE-2024-23113
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions…
Fortinet · FortiSwitchManager
ExploitedCritical9.8
CVE-2021-25489
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to…
Samsung Mobile · Samsung Mobile Devices
ExploitedLow3.3
CVE-2018-0175
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could…
Cisco IOS, IOS XE, and IOS XR
ExploitedHigh8.0
CVE-2019-1579
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect…
Palo Alto Networks GlobalProtect Portal/Gateway Interface
ExploitedHigh8.1
CVE-2020-3118
Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
Cisco · Cisco IOS XR Software
ExploitedHigh8.8

CVE-2026-120059
psqlODBC uses a server-supplied column name as a format string
PostgreSQL · psqlODBC
Medium6.8
CVE-2026-63201
netopeer2-server logging has format string vulnerability via subtree filter
CESNET · netopeer2
High7.1
CVE-2026-45452
Unitronics - CWE-134 Use of Externally-Controlled format string
Unitronics · Unitronics UniStream Pro/UniLogic
High8.3
CVE-2026-102062
Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
Juniper Networks · Junos OS
Critical9.2
CVE-2026-101965
Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled
Juniper Networks · Junos OS Evolved
High8.7
CVE-2026-101966
Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service
Juniper Networks · Junos OS Evolved
High8.8
CVE-2026-94520
Microsoft SQL Server Denial of Service Vulnerability
Microsoft · Microsoft SQL Server 2017 (GDR)
Medium4.9
CVE-2026-83585
Windows NTFS Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8
CVE-2026-85842
Windows Image Acquisition Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 21H2
High7.8
CVE-2026-76753
Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)
Critical9.8