CWE-684
31 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 31
- Last 12 months
- 15
- Critical
- 4
- Known exploited
- 0
Critical 4High 9Medium 11Low 7Not scored 0
CVEs per yearBy the year they were published
- 20201
- 20221
- 20234
- 20246
- 20256
- 202613
Newest CVEs
- CVE-2026-106390
Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information…
Google · Chrome
Medium4.3 - CVE-2026-106361
Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social…
Google · Chrome
Medium6.5 - CVE-2026-79126
Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially…
Google · Chrome
Medium5.9 - CVE-2026-52735
ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
ZcashFoundation · zebra
Critical9.3 - CVE-2026-44597
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.
torproject · Tor
Low3.7 - CVE-2026-40685
In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted…
Exim · Exim
Medium6.5 - CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.…
Exim · Exim
Medium5.9 - CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.
Technitium · DnsServer
High7.2 - CVE-2026-35381
uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering
Uutils · coreutils
Low3.3 - CVE-2026-35379
uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling
Uutils · coreutils
Low3.3