CWE-664

66 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 6High 28Medium 29Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2022-27518
Unauthenticated remote arbitrary code execution
Citrix · Citrix Gateway, Citrix ADC
ExploitedCritical9.8

CVE-2026-57187
Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
asterisk · asterisk
High7.1
CVE-2026-76408
Improper Control of a Resource Through its Lifetime in Splunk SOAR
Splunk · Splunk SOAR
Critical9.8
CVE-2026-76300
Security Hardening in Splunk Enterprise - October 2026
Splunk · Splunk Enterprise
High8.8
CVE-2026-94192
Module object deallocation can free a live ThreadX kernel object
Eclipse Foundation · Eclipse ThreadX
High8.5
CVE-2026-68908
libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path
mz-automation · libiec61850
Medium5.3
CVE-2026-57446
libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle
mz-automation · libiec61850
Medium5.3
CVE-2026-102026
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used
Juniper Networks · Junos OS
High8.7
CVE-2026-76282
Improper Control of a Resource Through its Lifetime in Splunk Enterprise
Splunk · Splunk Enterprise
High8.8
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime Management Vulnerabilities
Cisco · Cisco Campus Gateway Software
High7.5
CVE-2026-76500
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities
Cisco · Cisco Application Policy Infrastructure Controller (APIC)
Critical9.8