Skip to content
CVE Tracker

CWE-281

350 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 350 in the listAtom feed of new CVEsWhat CWE-281 is, at MITRE (opens in a new tab)
Published CVEs
350
Last 12 months
37
Critical
29
Known exploited
1

Critical 29High 161Medium 133Low 25Not scored 2

CVEs per yearBy the year they were published

  1. 20071
  2. 20141
  3. 201722
  4. 20184
  5. 202018
  6. 202237
  7. 202332
  8. 202334
  9. 202442
  10. 202594
  11. 202628
  12. 202634

Known exploitedNewest addition to KEV first

  • CVE-2017-8543

    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1…

    Microsoft Corporation · Microsoft Windows

    ExploitedCritical9.8

Newest CVEs

  • CVE-2025-10149

    Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover

    WSO2 · WSO2 Identity Server as Key Manager

    High8.2
  • CVE-2026-101306

    Multiple jail filesystem root escapes

    FreeBSD · FreeBSD

    Critical9.8
  • CVE-2026-47596

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the…

    NVIDIA · GeForce

    High7.0
  • CVE-2026-47599

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper…

    NVIDIA · GeForce

    High7.8
  • CVE-2026-47595

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the…

    NVIDIA · GeForce

    High7.8
  • CVE-2026-47489

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A…

    NVIDIA · GeForce

    High7.8
  • CVE-2026-93658

    uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid

    uutils · coreutils

    High7.3
  • CVE-2026-61709

    OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

    openfga · openfga

    Medium5.3
  • CVE-2026-82964

    Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys

    Gen Digital · Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security

    High8.8
  • CVE-2026-88922

    Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

    HashiCorp · Shared library

    Medium6.7

Vendors it comes up for most

  1. Apple35
  2. Microsoft Corporation21
  3. Huawei10
  4. Google9
  5. Mozilla8
  6. OpenHarmony8
  7. nextcloud8
  8. NVIDIA7
  9. Jenkins Project4
  10. Red Hat4