CWE-274
42 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 42
- Last 12 months
- 3
- Critical
- 2
- Known exploited
- 0
Critical 2High 23Medium 16Low 1Not scored 0
CVEs per yearBy the year they were published
- 20183
- 202013
- 20211
- 20224
- 20235
- 20246
- 20257
- 20263
Newest CVEs
- CVE-2026-62764
Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
Apache Software Foundation · Apache Accumulo
Medium5.7 - CVE-2025-54511
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without…
AMD · MI-25
Medium5.3 - CVE-2026-33005
Apache OpenMeetings: Insufficient checks in FileWebService
Apache Software Foundation · Apache OpenMeetings
Medium4.3 - CVE-2025-62175
Mastodon streaming API fails to disconnect disabled and suspended users
mastodon · mastodon
Medium4.3 - CVE-2023-20516
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in…
AMD · AMD Instinct™ MI250
Low3.3 - CVE-2025-29365
spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.
Product not named
Critical9.8 - CVE-2025-31275
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any…
Apple · macOS
Medium6.2 - CVE-2025-20177
Cisco IOS XR Software Image Verification Bypass Vulnerability
Cisco · Cisco IOS XR Software
Medium6.7 - CVE-2024-46974
GPU DDK - Arbitrary write of read-only dmabuf
Imagination Technologies · Graphics DDK
High7.8 - CVE-2025-20156
Cisco Meeting Management Client-Server Privilege Escalation Vulnerability
Cisco · Cisco Meeting Management
Critical9.9