CWE-67
7 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 7
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 6Low 1Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20251
- 20264
Newest CVEs
- CVE-2026-102598
Werkzeug safe_join() allows Windows special device names
pallets · werkzeug
Medium6.3 - CVE-2026-17545
PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
PHP Group · PHP
Medium6.9 - CVE-2026-27199
Werkzeug safe_join() allows Windows special device names
pallets · werkzeug
Medium6.3 - CVE-2026-21860
Werkzeug safe_join() allows Windows special device names with compound extensions
pallets · werkzeug
Medium6.3 - CVE-2025-66221
Werkzeug safe_join() allows Windows special device names
pallets · werkzeug
Medium6.3 - CVE-2024-51745
Wasmtime doesn't fully sandbox all the Windows device filenames
bytecodealliance · wasmtime
Low2.3 - CVE-2024-35197
gix refs and paths with reserved Windows device names access the devices
Byron · gitoxide
Medium5.4