Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-657

19 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
19
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 6Medium 11Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20171
  2. 20192
  3. 20202
  4. 20212
  5. 20223
  6. 20231
  7. 20243
  8. 20253
  9. 20262

Newest CVEs

  • CVE-2026-48399

    Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)

    Adobe · Adobe Campaign Classic

    High7.5
  • CVE-2026-39888

    PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

    MervinPraison · praisonaiagents

    Critical10.0
  • CVE-2025-54255

    Acrobat Reader | Violation of Secure Design Principles (CWE-657)

    Adobe · Acrobat Reader

    Medium4.0
  • CVE-2025-24887

    OpenCTI bypass of protected attribute update

    OpenCTI-Platform · opencti

    Medium6.3
  • CVE-2024-57957

    Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service…

    Huawei · HarmonyOS

    Medium6.6
  • CVE-2024-33849

    ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.

    Product not named

    Medium6.5
  • CVE-2024-26139

    OpenCTI Authenticated Privilege Escalation

    OpenCTI-Platform · opencti

    High8.3
  • CVE-2023-52714

    Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service…

    Huawei · HarmonyOS

    High7.5
  • CVE-2023-29320

    ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw

    Adobe · Acrobat Reader

    High7.8
  • CVE-2022-30683

    AEM Violation of Secure Design Principles Security feature bypass

    Adobe · Experience Manager

    Medium5.3

Vendors it comes up for most

  1. Adobe8
  2. Huawei2
  3. OpenCTI-Platform2
  4. Juniper Networks1
  5. MervinPraison1