Skip to content
CVE Tracker

CWE-667

772 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 772 in the listAtom feed of new CVEsWhat CWE-667 is, at MITRE (opens in a new tab)
Published CVEs
772
Last 12 months
166
Critical
11
Known exploited
2

Critical 11High 206Medium 542Low 13Not scored 0

CVEs per yearBy the year they were published

  1. 20081
  2. 20101
  3. 20107
  4. 20185
  5. 201925
  6. 202425
  7. 2025192
  8. 202577
  9. 202599
  10. 202560
  11. 2026148
  12. 2026116

Known exploitedNewest addition to KEV first

  • CVE-2025-43510

    A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

    Apple · iOS and iPadOS

    ExploitedHigh7.8
  • CVE-2021-1782

    A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001…

    Apple · iOS and iPadOS

    ExploitedHigh7.0

Newest CVEs

  • CVE-2026-118052

    Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

    Eclipse Foundation · Eclipse ThreadX

    Medium6.8
  • CVE-2026-61854

    VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

    jackh54 · VoiceSentinel

    High8.2
  • CVE-2026-118593

    Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

    Red Hat · Red Hat Enterprise Linux 10

    Medium5.9
  • CVE-2026-106174

    A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device…

    Fortinet · FortiOS

    Medium6.7
  • CVE-2026-110803

    Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8

    vaadin · framework

    High8.7
  • CVE-2026-111879

    DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock

    DBI

    Medium6.5
  • CVE-2026-107674

    IBM i is Affected by a Denial of Service in Digital Certificate Manager

    IBM · i

    Medium5.1
  • CVE-2026-103670

    Gitea trusted workflow cancellation by unapproved fork runs

    Gitea · Gitea

    High7.5
  • CVE-2026-105113

    Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock

    nezhahq · nezha

    High7.1
  • CVE-2026-47581

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this…

    NVIDIA · GeForce

    Medium5.5

Vendors it comes up for most

  1. Linux552
  2. MediaTek, Inc.13
  3. Red Hat9
  4. Google7
  5. Apple6
  6. Cisco6
  7. Xen6
  8. Dell5
  9. Qualcomm, Inc.4
  10. Fedora3