CWE-283

CVEs per yearBy the year they were published

1. 20213
2. 20221
3. 20231
4. 20243
5. 20256
6. 202622

Newest CVEs

• CVE-2026-118029

  Unverified ownership of the default Athena query result location in AWS SDK for pandas

  aws · aws-sdk-pandas

  Medium5.9
• CVE-2026-112911

  filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

  tox-dev · filelock

  Medium6.3
• CVE-2026-83791

  Windows Virtual Input Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1809

  High7.8
• CVE-2026-110237

  Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution

  vifm · vifm

  High7.0
• CVE-2026-93853

  Barman snapshot backup deletion trusts unverified backup catalog metadata

  EnterpriseDB · Barman

  High7.2
• CVE-2025-24890

  gix-sec safe.directory protections absent for elevated administrators

  GitoxideLabs · gitoxide

  Medium6.8
• CVE-2026-87913

  Missing S3 bucket ownership verification in the AWS Security Agent MCP server

  AWS · AWS Security Agent MCP server

  Medium5.1
• CVE-2026-87912

  Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

  AWS · AWS Security Agent plugin

  Medium5.1
• CVE-2026-84386

  A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper…

  Fortinet · FortiClientWindows

  Medium4.7
• CVE-2026-85781

  Unverified access point ownership in Amazon EFS CSI Driver

  aws · aws-efs-csi-driver

  Medium5.1

Vendors it comes up for most

1. AWS6
2. IBM2
3. Arista Networks1
4. Dell1
5. Eclipse Foundation1
6. EnterpriseDB1
7. Fortinet1
8. Gitea1
9. GitoxideLabs1
10. Kubernetes1