CWE-248

CVEs per yearBy the year they were published

1. 20171
2. 20183
3. 20199
4. 20207
5. 20215
6. 202213
7. 202327
8. 202433
9. 202563
10. 2026214

Newest CVEs

• CVE-2026-122315

  Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic

  kyverno · kyverno

  High8.7
• CVE-2026-122314

  Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic

  kyverno · kyverno

  High8.7
• CVE-2026-76892

  tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

  tsparticles · tsparticles

  High8.7
• CVE-2026-121443

  svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag

  darylldoyle · svg-sanitizer

  Medium6.9
• CVE-2026-121414

  Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update

  parse-community · parse-server

  High8.2
• CVE-2026-121386

  FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers

  FreeRDP · FreeRDP

  High8.7
• CVE-2026-59004

  In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional…

  Google · Android

  High8.4
• CVE-2026-55288

  In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of…

  Google · Android

  High8.4
• CVE-2026-120216

  fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses

  fastify · fastify

  Medium5.9
• CVE-2026-120215

  @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook

  @fastify/cors · @fastify/cors

  Low3.7

Vendors it comes up for most

1. Apache Software Foundation14
2. Cisco13
3. surrealdb11
4. undici11
5. MediaTek, Inc.10
6. Huawei9
7. Elastic6
8. Microsoft6
9. vllm-project6
10. Red Hat5