CWE-1395

56 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 19High 21Medium 10Low 4Not scored 2

CVEs per yearBy the year they were published

CVE-2026-115946
XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
XS-libbrotli
Not scored
CVE-2026-117611
Trust of compromised eMudhra root CA in bundled CA stores
Checkmk GmbH · Checkmk
High7.1
CVE-2026-114113
Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders
lovell · sharp
High8.4
CVE-2026-105642
Ghost: Remote Code Execution via Bookmark Card Images
TryGhost · Ghost
High8.8
CVE-2026-100242
DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)
Wikimedia Foundation · Mediawiki - DataTransfer Extension
High7.5
CVE-2026-90455
Dependency on vulnerable third-party component in Malcolm
CISA · Malcolm
Medium6.3
CVE-2026-69713
Windows Secure Boot Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
Medium4.4
CVE-2026-58235
Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)
SAP_SE · SAP NetWeaver AS Java (Adobe Document Services)
Medium6.3
CVE-2026-58586
Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp
ZAPAD · Image::WebP
Critical9.8
CVE-2026-16634
TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99
FELIPE · TOML::XS
Critical9.8