CWE-590

CVEs per yearBy the year they were published

1. 20201
2. 20213
3. 20222
4. 20234
5. 20256
6. 202610

Newest CVEs

• CVE-2026-68908

  libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path

  mz-automation · libiec61850

  Medium5.3
• CVE-2026-94370

  Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs

  qt · Qt_for_MCUs

  Medium6.5
• CVE-2026-76465

  Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

  Cisco · Cisco NX-OS Software

  Critical9.8
• CVE-2026-106578

  ImageMagick: Invalid Memory Free in MVG decoder

  ImageMagick · ImageMagick

  Medium5.9
• CVE-2026-95311

  Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute…

  Google · Chrome

  Critical9.6
• CVE-2026-89161

  In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.

  PCRE · PCRE2

  High7.4
• CVE-2026-18582

  mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap

  mz-automation · libiec61850

  Medium6.9
• CVE-2025-7006

  Avast antivirus use of stack memory after free when scanning a malformed PE file

  Gen Digital · Avast Antivirus

  Medium5.5
• CVE-2026-47328

  Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling

  Canonical · Ubuntu Linux

  Medium6.1
• CVE-2026-20810

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1809

  High7.8

Vendors it comes up for most

1. SAP_SE3
2. Microsoft2
3. PHP Group2
4. mz-automation2
5. Canonical1
6. Cisco1
7. GNU1
8. Gen Digital1
9. Google1
10. Ichitaro1