CWE-672
111 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 111
- Last 12 months
- 47
- Critical
- 7
- Known exploited
- 0
Critical 7High 44Medium 47Low 13Not scored 0
CVEs per yearBy the year they were published
- 20091
- 20172
- 20193
- 202010
- 20211
- 202211
- 20235
- 202417
- 202514
- 202647
Newest CVEs
- CVE-2026-121256
Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…
Google · Chrome
High8.3 - CVE-2026-120449
Outline before 1.12.0 Improper Access Control via Public Document Shares
Outline · Outline
Medium6.9 - CVE-2026-62966
ESPAsyncWebServer multipart parser has null-pointer write
ESP32Async · ESPAsyncWebServer
High7.5 - CVE-2026-93006
Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
Red Hat · Red Hat Ceph Storage 9
Medium6.8 - CVE-2026-115402
OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…
OpenVPN · ovpn-dco-win
Medium5.7 - CVE-2026-53918
odhcpd DHCPv6 IA dangling first pointer use-after-free
openwrt · odhcpd
High8.8 - CVE-2026-113121
Use of released resource in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass…
Google · Chrome
High8.8 - CVE-2026-113216
Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI…
Google · Chrome
High8.8 - CVE-2026-57446
libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle
mz-automation · libiec61850
Medium5.3 - CVE-2026-96589
Gitea private repository access retained after rejected transfer
Gitea · Gitea
Medium4.3