Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-610

249 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 249 in the listAtom feed of new CVEsWhat CWE-610 is, at MITRE (opens in a new tab)
Published CVEs
249
Last 12 months
44
Critical
17
Known exploited
2

Critical 17High 96Medium 117Low 19Not scored 0

CVEs per yearBy the year they were published

  1. 20172
  2. 20182
  3. 201930
  4. 202013
  5. 202129
  6. 202241
  7. 202331
  8. 202427
  9. 202534
  10. 202640

Known exploitedNewest addition to KEV first

  • CVE-2025-0111

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    Palo Alto Networks · Cloud NGFW

    ExploitedHigh7.1
  • CVE-2022-27593

    DeadBolt Ransomware

    QNAP Systems Inc. · Photo Station

    ExploitedCritical10.0

Newest CVEs

  • CVE-2026-119342

    Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass

    Stirling-Tools · Stirling-PDF

    Medium5.3
  • CVE-2026-67077

    HCL BigFix AEX is affected by multiple security vulnerabilities.

    HCL Software · BigFix AEX

    Medium4.2
  • CVE-2026-95376

    Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system…

    Google · Chrome

    High8.0
  • CVE-2026-81375

    Confused Deputy in Application Integration allows Internal File Read

    Google Cloud · Application Integration

    High8.3
  • CVE-2026-19032

    jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

    FasterXML · jackson-databind

    Medium5.3
  • CVE-2026-21810

    HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

    HCLSoftware · BigFix Quantum Risk Analyzer

    Medium4.4
  • CVE-2026-79256

    Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer…

    Google · Chrome

    High8.3
  • CVE-2026-78966

    Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…

    Google · Chrome

    Medium4.3
  • CVE-2026-62960

    Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

    git-for-windows · git

    High7.4
  • CVE-2026-76572

    pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference

    pkp · pkp-lib

    Medium5.1

Vendors it comes up for most

  1. Google11
  2. Jinher8
  3. Acronis7
  4. Microsoft7
  5. Siemens6
  6. Palo Alto Networks5
  7. WWBN5
  8. Apache Software Foundation3
  9. Foxit3
  10. HashiCorp3