CWE-226
42 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 42
- Last 12 months
- 28
- Critical
- 1
- Known exploited
- 0
Critical 1High 13Medium 22Low 6Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20191
- 20201
- 20221
- 20233
- 20244
- 20257
- 202624
Newest CVEs
- CVE-2026-114366
Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework
qt · Qt Framework
Low2.3 - CVE-2026-119179
MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data
MongoDB · Node.js Driver
High8.3 - CVE-2026-114501
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
python-pillow · Pillow
Medium6.3 - CVE-2026-107315
pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)
pgjdbc · pgjdbc
Medium5.3 - CVE-2026-106111
ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate
SixLabors · ImageSharp
Medium5.9 - CVE-2026-92708
devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers
sveltejs · devalue
High7.5 - CVE-2026-18023
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from…
ASUS · Armoury Crate
Medium5.7 - CVE-2026-74791
Scriban before 7.0.0 Authorization Bypass via Stale Include Cache
scriban · scriban
Critical9.2 - CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect…
OpenStack · Ironic
Medium6.3 - CVE-2026-47247
libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation
strukturag · libheif
High7.5