CWE-475

CVEs per yearBy the year they were published

1. 20201
2. 20221
3. 20243
4. 20244
5. 20252
6. 20266

Newest CVEs

• CVE-2026-73797

  HPE NonStop TSQLFIL - Memory corruption vulnerability

  Hewlett Packard Enterprise · HPE NonStop TSQLFIL

  Medium5.3
• CVE-2026-19311

  Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

  AWS · OpenSearch

  High8.6
• CVE-2026-42009

  Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

  gnutls

  High7.5
• CVE-2026-8391

  Other issue in the JavaScript Engine component

  Mozilla · Firefox

  Medium5.3
• CVE-2026-34379

  OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)

  AcademySoftwareFoundation · openexr

  High7.1
• CVE-2026-21690

  iccDEV has Type Confusion in CIccTagXmlTagData::ToXml()

  InternationalColorConsortium · iccDEV

  Medium6.3
• CVE-2025-47866

  An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on…

  Trend Micro, Inc. · Trend Micro Apex Central

  Medium4.3
• CVE-2025-47865

  A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on…

  Trend Micro, Inc. · Trend Micro Apex Central

  High7.5
• CVE-2024-10569

  Zip Bomb Vulnerability in gradio-app/gradio

  gradio-app · gradio-app/gradio

  High7.5
• CVE-2024-3099

  Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow

  mlflow · mlflow/mlflow

  Medium5.4

Vendors it comes up for most

1. Mutt2
2. Trend Micro, Inc.2
3. AWS1
4. AcademySoftwareFoundation1
5. Cisco1
6. Github1
7. Hewlett Packard Enterprise1
8. InternationalColorConsortium1
9. MongoDB Inc.1
10. Mozilla1