CWE-497

CVEs per yearBy the year they were published

1. 20191
2. 20202
3. 20217
4. 20226
5. 202310
6. 202447
7. 2025180
8. 2026191

Known exploitedNewest addition to KEV first

• CVE-2021-31955

  Windows Kernel Information Disclosure Vulnerability

  Microsoft · Windows 10 Version 1809

  ExploitedMedium5.5

Newest CVEs

• CVE-2026-109823

  Host filesystem path disclosure via DNS rebinding

  tidewave-ai · tidewave

  Low2.3
• CVE-2026-111079

  Goose: goose: shell history and environment leak via terminal integration

  Red Hat · Red Hat Enterprise Linux 10

  High7.4
• CVE-2026-76435

  Cisco Expressway Series Information Disclosure Vulnerability

  Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

  Medium5.3
• CVE-2026-108089

  Apache Cocoon: Unauthenticated access to diagnostic interfaces

  Apache Software Foundation · Apache Cocoon

  High7.5
• CVE-2026-111946

  Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header

  Plack-Middleware-ETag

  Medium5.3
• CVE-2026-110466

  WisdomGarden｜Tronclass - Sensitive Data Exposure

  WisdomGarden · Tronclass

  Medium5.3
• CVE-2026-96948

  Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

  Microsoft · Windows 10 Version 1607

  Medium5.5
• CVE-2026-85866

  Windows ALPC Information Disclosure Vulnerability

  Microsoft · Windows 10 Version 1809

  Medium4.7
• CVE-2026-70261

  Microsoft Trace Data Helper Information Disclosure Vulnerability

  Microsoft · Windows 10 Version 1607

  Medium5.5
• CVE-2026-70260

  Microsoft Trace Data Helper Information Disclosure Vulnerability

  Microsoft · Windows 10 Version 1607

  Medium5.5

Vendors it comes up for most

1. Microsoft36
2. IBM32
3. SAP_SE16
4. Red Hat10
5. Cisco9
6. Palo Alto Networks9
7. Nagios5
8. Apple4
9. GitLab4
10. SICK AG4