CWE-822
306 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 5 of them as exploited in the wild.
- Published CVEs
- 306
- Last 12 months
- 157
- Critical
- 16
- Known exploited
- 5
Critical 16High 221Medium 65Low 4Not scored 0
CVEs per yearBy the year they were published
- 20182
- 20197
- 20201
- 20218
- 202110
- 20239
- 202432
- 202544
- 2026134
- 202659
Known exploitedNewest addition to KEV first
- CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8 - CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh8.4 - CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8
Newest CVEs
- CVE-2026-87041
Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory
zephyrproject · zephyr
High7.8 - CVE-2026-16511
Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory
zephyrproject · zephyr
High8.8 - CVE-2026-115653
Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode
Eclipse Foundation · Eclipse ThreadX
High7.0 - CVE-2026-88781
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…
ASUS · motherboards firmware
Medium6.8 - CVE-2026-19676
PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode
zephyrproject · zephyr
High7.8 - CVE-2026-110322
HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
HMS Networks · PEAK-System Device Driver Setup
Medium6.8 - CVE-2026-19595
Zephyr RTIO syscall verifier validates output parameters for read instead of write access
zephyrproject · zephyr
Medium6.1 - CVE-2026-108435
Microsoft Office Word Information Disclosure Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
Medium6.5 - CVE-2026-103578
Windows Kernel Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 26H1
Medium6.8 - CVE-2026-102188
Windows Storage Port Driver Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
Medium6.8