Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-386

4 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 4 in the listAtom feed of new CVEsWhat CWE-386 is, at MITRE (opens in a new tab)
Published CVEs
4
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 3Medium 0Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20263

Newest CVEs

  • CVE-2026-116486

    Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache

    easymock · objenesis

    Low2.0
  • CVE-2026-94114

    Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

    Apache Software Foundation · Apache Commons BCEL

    High8.2
  • CVE-2026-53081

    bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars

    Linux · Linux

    High7.8
  • CVE-2024-3852

    GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10,…

    Mozilla · Firefox

    High7.5

Vendors it comes up for most

  1. Apache Software Foundation1
  2. Linux1
  3. Mozilla1
  4. easymock1