Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-459

266 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 266 in the listAtom feed of new CVEsWhat CWE-459 is, at MITRE (opens in a new tab)
Published CVEs
266
Last 12 months
94
Critical
16
Known exploited
0

Critical 16High 86Medium 131Low 31Not scored 2

CVEs per yearBy the year they were published

  1. 20031
  2. 20057
  3. 20172
  4. 20187
  5. 201914
  6. 202020
  7. 202116
  8. 202226
  9. 202315
  10. 202438
  11. 202528
  12. 202691

Newest CVEs

  • CVE-2026-121750

    nvm install --offline installs a cached tarball that previously failed checksum verification

    nvm-sh · nvm

    Low2.1
  • CVE-2026-121204

    Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…

    Google · Chrome

    High8.8
  • CVE-2026-121055

    Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome…

    Google · Chrome

    Not scored
  • CVE-2026-121096

    Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (Chromium security severity:…

    Google · Chrome

    Not scored
  • CVE-2026-85033

    Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next peer

    zephyrproject · zephyr

    Medium4.6
  • CVE-2026-116132

    HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk

    HTTP-Body

    High7.1
  • CVE-2026-115478

    obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

    The-40-Thieves · obsidian-tc

    High7.1
  • CVE-2026-113168

    Incomplete cleanup in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access…

    Google · Chrome

    High8.8
  • CVE-2026-113050

    Incomplete cleanup in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social…

    Google · Chrome

    Medium6.5
  • CVE-2026-113073

    Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…

    Google · Chrome

    High8.8

Vendors it comes up for most

  1. Linux33
  2. Google26
  3. Apache Software Foundation12
  4. AMD8
  5. Huawei7
  6. Apple5
  7. Cisco4
  8. NVIDIA4
  9. Xen4
  10. ZcashFoundation4