CWE-453

CVEs per yearBy the year they were published

1. 20223
2. 20235
3. 20244
4. 20254
5. 20266

Newest CVEs

• CVE-2026-103577

  Microsoft QUIC Security Feature Bypass Vulnerability

  Microsoft · Windows 11 version 23H2

  High7.5
• CVE-2026-109828

  libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable

  libsndfile

  Medium5.3
• CVE-2026-92950

  vm2 before 3.11.7 Sandbox Escape via CLI require

  patriksimek · vm2

  Critical9.3
• CVE-2026-19212

  WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable

  WonderTrader

  Medium5.3
• CVE-2026-0082

  In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could…

  Google · Android

  Critical10.0
• CVE-2026-41330

  OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy

  OpenClaw · OpenClaw

  Low2.0
• CVE-2025-61926

  Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret

  ossf · allstar

  Medium4.6
• CVE-2025-48563

  In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local…

  Google · Android

  High7.8
• CVE-2025-47945

  Donetick Has Weak Default JWT Secret

  donetick · donetick

  Critical9.1
• CVE-2025-30206

  Dpanel's hard-coded JWT secret leads to remote code execution

  donknap · dpanel

  Critical9.8

Vendors it comes up for most

1. Ghost Foundation4
2. Microsoft3
3. Google2
4. FOGProject1
5. GE1
6. JetBrains1
7. OpenClaw1
8. SoftEther VPN1
9. donetick1
10. donknap1