Skip to content
CVE Tracker

CWE-267

77 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 77 in the listAtom feed of new CVEsWhat CWE-267 is, at MITRE (opens in a new tab)
Published CVEs
77
Last 12 months
25
Critical
7
Known exploited
1

Critical 7High 35Medium 29Low 5Not scored 1

CVEs per yearBy the year they were published

  1. 20181
  2. 20193
  3. 20202
  4. 20221
  5. 20238
  6. 20236
  7. 202523
  8. 202512
  9. 202621

Known exploitedNewest addition to KEV first

  • CVE-2025-41244

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware · VCF operations

    ExploitedHigh7.8

Newest CVEs

  • CVE-2026-114524

    Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225

    Drupal · Custom Formatters

    Not scored
  • CVE-2026-57202

    Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

    asterisk · asterisk

    High8.1
  • CVE-2026-96363

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161

    Drupal · Webform

    Low3.1
  • CVE-2026-96367

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

    Drupal · Webform

    Medium4.6
  • CVE-2026-96371

    Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166

    Drupal · Webform

    Medium5.4
  • CVE-2026-96390

    Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185

    Drupal · Editoria11y Accessibility Checker

    Medium4.3
  • CVE-2026-109520

    Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions

    Colorful · iGameCenter

    Critical9.3
  • CVE-2026-96659

    Foreman: excessive permissions for viewer role on preview

    Red Hat · Red Hat Satellite 6.16 for RHEL 8

    Critical9.1
  • CVE-2026-18858

    IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

    IBM · i

    Low3.3
  • CVE-2026-81161

    Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107

    Drupal · Content Moderation Notifications

    Low3.3

Vendors it comes up for most

  1. Oracle Corporation12
  2. Drupal10
  3. Odoo5
  4. Ivanti4
  5. Apache Software Foundation3
  6. Red Hat3
  7. [UNKNOWN]3
  8. B&R Industrial Automation2
  9. Dell2
  10. F52