Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-672

111 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
111
Last 12 months
47
Critical
7
Known exploited
0

Critical 7High 44Medium 47Low 13Not scored 0

CVEs per yearBy the year they were published

  1. 20091
  2. 20172
  3. 20193
  4. 202010
  5. 20211
  6. 202211
  7. 20235
  8. 202417
  9. 202514
  10. 202647

Newest CVEs

  • CVE-2026-121256

    Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…

    Google · Chrome

    High8.3
  • CVE-2026-120449

    Outline before 1.12.0 Improper Access Control via Public Document Shares

    Outline · Outline

    Medium6.9
  • CVE-2026-62966

    ESPAsyncWebServer multipart parser has null-pointer write

    ESP32Async · ESPAsyncWebServer

    High7.5
  • CVE-2026-93006

    Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

    Red Hat · Red Hat Ceph Storage 9

    Medium6.8
  • CVE-2026-115402

    OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…

    OpenVPN · ovpn-dco-win

    Medium5.7
  • CVE-2026-53918

    odhcpd DHCPv6 IA dangling first pointer use-after-free

    openwrt · odhcpd

    High8.8
  • CVE-2026-113121

    Use of released resource in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass…

    Google · Chrome

    High8.8
  • CVE-2026-113216

    Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI…

    Google · Chrome

    High8.8
  • CVE-2026-57446

    libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle

    mz-automation · libiec61850

    Medium5.3
  • CVE-2026-96589

    Gitea private repository access retained after rejected transfer

    Gitea · Gitea

    Medium4.3

Vendors it comes up for most

  1. Linux12
  2. Google10
  3. IBM4
  4. NLnet Labs3
  5. Apple2
  6. F52
  7. Mattermost2
  8. Mozilla2
  9. OpenClaw2
  10. Red Hat2