CWE-366

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20221
4. 20235
5. 20242
6. 20253
7. 20267

Newest CVEs

• CVE-2026-86247

  Apache Tomcat Native: Client certificate requirements can be down-graded

  Apache Software Foundation · Apache Tomcat Native

  High7.4
• CVE-2026-25687

  ZCC race condition in ZPA tunnel handler

  Zscaler · Client Connector

  High8.1
• CVE-2026-46181

  RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

  Linux · Linux

  High7.8
• CVE-2026-23666

  .NET Framework Denial of Service Vulnerability

  Microsoft · Microsoft .NET Framework 3.5

  High7.5
• CVE-2026-3904

  Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64…

  The GNU C Library · glibc

  Medium6.2
• CVE-2026-23684

  Race condition vulnerability in SAP Commerce Cloud

  SAP_SE · SAP Commerce Cloud

  Medium5.9
• CVE-2026-22819

  Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts

  akinloluwami · outray

  Medium5.9
• CVE-2025-58143

  Mutiple vulnerabilities in the Viridian interface

  Xen · Xen

  Critical9.8
• CVE-2025-31115

  XZ has a heap-use-after-free bug in threaded .xz decoder

  tukaani-project · xz

  High8.7
• CVE-2024-10630

  A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking…

  Ivanti · Application Control Engine

  High7.8

Vendors it comes up for most

1. Red Hat2
2. Apache Software Foundation1
3. Google1
4. Ivanti1
5. Juniper Networks1
6. Linux1
7. Microsoft1
8. SAP_SE1
9. Synology1
10. The GNU C Library1