CWE-359

CVEs per yearBy the year they were published

1. 20181
2. 20226
3. 202326
4. 202316
5. 202447
6. 202569
7. 202646
8. 20263
9. 20262

Newest CVEs

• CVE-2026-85916

  Azure Active Directory Information Disclosure Vulnerability

  Microsoft · Windows 11 version 23H2

  Medium6.2
• CVE-2026-102579

  Moodle: user profile information disclosure via grade web service

  moodle

  Medium4.3
• CVE-2026-39372

  InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

  InvoicePlane · InvoicePlane

  Medium4.9
• CVE-2026-54565

  rhwp browser extension performs SSRF / private-network requests and leaks HWP preview data to untrusted pages

  edwardkim · rhwp

  Medium4.7
• CVE-2026-61588

  djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client

  djust-org · djust

  Medium6.5
• CVE-2026-92565

  Rallly before 4.15.0 Information Disclosure via polls.get

  lukevella · rallly

  Medium6.9
• CVE-2026-76855

  Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints

  Netcore · NR255-V

  High7.1
• CVE-2026-86904

  A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be…

  Apple · iOS and iPadOS

  High7.5
• CVE-2026-84606

  A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may…

  Apple · iOS and iPadOS

  High7.5
• CVE-2026-28836

  A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently…

  Apple · macOS

  Medium6.1

Vendors it comes up for most

1. Apple30
2. Microsoft20
3. xwiki12
4. Mozilla6
5. nextcloud5
6. Acronis4
7. Apache Software Foundation4
8. GitLab3
9. HCL Software3
10. IBM3