Skip to content
CVE Tracker

CWE-404

872 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 6 of them as exploited in the wild.

All 872 in the listAtom feed of new CVEsWhat CWE-404 is, at MITRE (opens in a new tab)
Published CVEs
872
Last 12 months
333
Critical
4
Known exploited
6

Critical 4High 199Medium 580Low 89Not scored 0

CVEs per yearBy the year they were published

  1. 202134
  2. 202226
  3. 20222
  4. 202322
  5. 20233
  6. 20234
  7. 20231
  8. 2025103
  9. 202568
  10. 202575
  11. 2026301
  12. 2026162

Known exploitedNewest addition to KEV first

  • CVE-2018-8639

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…

    Microsoft · Windows 7

    ExploitedHigh8.4
  • CVE-2018-8611

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…

    Microsoft · Windows 7

    ExploitedHigh7.8
  • CVE-2018-8406

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…

    Microsoft · Windows Server 2016

    ExploitedHigh7.8
  • CVE-2018-8405

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…

    Microsoft · Windows Server 2012 R2

    ExploitedHigh7.8
  • CVE-2018-8120

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…

    Microsoft · Windows Server 2008

    ExploitedHigh7.0
  • CVE-2017-6627

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to…

    Cisco IOS and Cisco IOS XE

    ExploitedHigh7.5

Newest CVEs

  • CVE-2026-121261

    phpMyAdmin ShapeFile SHP File loadFromFile infinite loop

    phpMyAdmin · ShapeFile

    Medium5.3
  • CVE-2026-120237

    ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption

    ag-ui-protocol · ag-ui

    Medium5.3
  • CVE-2026-120235

    ag-ui-protocol ag-ui SSE Parser sse.ts parseSSEStream resource consumption

    ag-ui-protocol · ag-ui

    Medium5.3
  • CVE-2026-120234

    ag-ui-protocol ag-ui HTTP Transport e.text resource consumption

    ag-ui-protocol · ag-ui

    Medium5.3
  • CVE-2026-118276

    a2ui-project a2ui Parser expression_parser.ts formatString resource consumption

    a2ui-project · a2ui

    Medium5.1
  • CVE-2026-118275

    a2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption

    a2ui-project · a2ui

    Medium6.9
  • CVE-2026-118274

    a2ui-project a2ui Binder generic-binder.ts resource consumption

    a2ui-project · a2ui

    Medium5.3
  • CVE-2026-118273

    a2ui-project a2ui data-model.ts DataModel.set resource consumption

    a2ui-project · a2ui

    Medium5.3
  • CVE-2026-118271

    a2ui-project a2ui data-context Resolver data-context.ts resource consumption

    a2ui-project · a2ui

    Medium5.3
  • CVE-2026-117506

    a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

    a2aproject · a2a-java

    Medium5.3

Vendors it comes up for most

  1. Microsoft37
  2. Linux27
  3. GNU25
  4. Oracle Corporation23
  5. IOBit18
  6. Axiomatic12
  7. Cisco12
  8. ASR8
  9. Juniper Networks8
  10. Apache Software Foundation7