Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-477

16 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 16 in the listAtom feed of new CVEsWhat CWE-477 is, at MITRE (opens in a new tab)
Published CVEs
16
Last 12 months
1
Critical
8
Known exploited
0

Critical 8High 3Medium 3Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20181
  2. 20193
  3. 20201
  4. 20221
  5. 20232
  6. 20257
  7. 20261

Newest CVEs

  • CVE-2026-1693

    Use of vulnerable Resource Owner Password Credentials flow

    arcinfo · PcVue

    Medium5.3
  • CVE-2025-49217

    An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…

    Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server

    Critical9.8
  • CVE-2025-49216

    An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and…

    Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server

    Critical9.8
  • CVE-2025-49214

    An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected…

    Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server

    High8.8
  • CVE-2025-49213

    An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…

    Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server

    Critical9.8
  • CVE-2025-49212

    An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…

    Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server

    Critical9.8
  • CVE-2025-49220

    An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected…

    Trend Micro, Inc. · Trend Micro Apex Central

    Critical9.8
  • CVE-2025-49219

    An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected…

    Trend Micro, Inc. · Trend Micro Apex Central

    Critical9.8
  • CVE-2023-28829

    A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All…

    Siemens · SIMATIC NET PC Software V14

    Low3.9
  • CVE-2023-23451

    The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI…

    N/A · SICK FX0-GENT00000, SICK FX0-GENT00030, SICK FX0-GMOD00000, SICK FX0-GMOD00010, SICK FX0-GPNT00000, SICK FX0-GPNT00030, SICK UE410-EN1, SICK UE410-EN3, SICK UE410-EN3S04, SICK UE410-EN4

    Critical9.8

Vendors it comes up for most

  1. Trend Micro, Inc.7
  2. Mattermost1
  3. NUUO1
  4. Philips1
  5. Siemens1
  6. arcinfo1