CWE-1419
13 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 13
- Last 12 months
- 7
- Critical
- 2
- Known exploited
- 2
Critical 2High 4Medium 5Low 2Not scored 0
CVEs per yearBy the year they were published
- 20232
- 20241
- 20253
- 20267
Known exploitedNewest addition to KEV first
- CVE-2026-109619
RCE via stale global state
PHP Group · PHP
ExploitedCritical9.2 - CVE-2026-109618
RCE via OOM corruption
PHP Group · PHP
ExploitedCritical9.2
Newest CVEs
- CVE-2026-109619
RCE via stale global state
PHP Group · PHP
ExploitedCritical9.2 - CVE-2026-109618
RCE via OOM corruption
PHP Group · PHP
ExploitedCritical9.2 - CVE-2026-105733
Windows Hyper-V Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 21H2
High8.8 - CVE-2026-73451
On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can
Arista Networks · EOS
Medium6.3 - CVE-2026-33773
Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied
Juniper Networks · Junos OS
Medium6.9 - CVE-2026-0109
In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service…
Google · Android
High7.5 - CVE-2026-21913
Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart
Juniper Networks · Junos OS
High8.7 - CVE-2025-53800
Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8 - CVE-2025-24495
Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially…
Intel(R) Core™ Ultra Processors
Medium6.8 - CVE-2024-57375
Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application…
Andamiro · Pump It Up
Low2.4