CWE-358

136 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 16High 44Medium 60Low 16Not scored 0

CVEs per yearBy the year they were published

CVE-2024-7965
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
Google · Chrome
ExploitedHigh8.8

CVE-2026-96303
Microsoft PowerShell Security Feature Bypass Vulnerability
Microsoft · PowerShell 7.4
Medium6.5
CVE-2026-70174
.NET Remote Code Execution Vulnerability
Microsoft · .NET 10.0 runtime
High8.8
CVE-2026-85805
Microsoft PowerShell Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.5
CVE-2026-96760
Authlib library contains a signature‑verification bypass vulnerability
Authlib · Authlib
Critical9.8
CVE-2026-46582
A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
NLnet Labs · Unbound
Low3.7
CVE-2026-65058
Trezor Safe improper security check in on-device display
Trezor · Safe 3
Medium5.9
CVE-2026-49783
Secure Boot Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
High7.8
CVE-2026-54431
Improper Data Validation in liboauth2
OpenIDC · liboauth2
Medium5.1
CVE-2026-12577
DVP80ES3 Improperly Implemented Security Check for Standard vulnerability
deltaww · DVP80ES3
High8.7
CVE-2026-57915
Apache Kerby: Kerberos Pre-Authentication Bypass
Apache Software Foundation · Apache Kerby
High7.3