CWE-372

12 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 2High 2Medium 8Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-119140
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield
bytecodealliance · wasmtime
Medium5.9
CVE-2023-54406
Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts
frappe · frappe
Medium6.9
CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
wolfSSL Inc. · wolfSSH
Medium6.9
CVE-2026-41388
OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling
OpenClaw · OpenClaw
Medium6.3
CVE-2026-41340
OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration
OpenClaw · OpenClaw
Medium6.3
CVE-2026-41300
OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding
OpenClaw · OpenClaw
Medium6.9
CVE-2024-22590
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten…
Product not named
Critical9.1
CVE-2023-4012
Incomplete Internal State Distinction in ntpsec
NTPsec · ntpsec
High7.5
CVE-2023-36834
Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS
Juniper Networks · Junos OS
Medium6.5
CVE-2023-31127
DMTF-2023-0001: SPDM mutual authentication bypass
DMTF · libspdm
Critical9.1