CWE-138

14 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 7Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-55841
Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message
Graylog2 · graylog2-server
High7.5
CVE-2026-26129
M365 Copilot Information Disclosure Vulnerability
Microsoft · Microsoft 365 Copilot's Business Chat
High7.5
CVE-2026-32178
.NET Spoofing Vulnerability
Microsoft · .NET 10.0
High7.5
CVE-2026-20009
Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Medium5.3
CVE-2025-48939
tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
AmauriC · tarteaucitron.js
Medium4.2
CVE-2025-5878
ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element
ESAPI · esapi-java-legacy
Medium6.9
CVE-2024-51500
Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware
meshtastic · firmware
Medium5.3
CVE-2024-38133
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
High7.8
CVE-2023-7012
Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to install a malicious app…
Google · Chrome
High7.5
CVE-2023-42117
Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability
Exim · Exim
High8.1