CWE-825

CVEs per yearBy the year they were published

1. 20191
2. 20212
3. 20238
4. 20246
5. 20259
6. 202674

Newest CVEs

• CVE-2026-122192

  Guest access to Firecracker process memory after a failed memory discard

  AWS · firecracker

  High7.1
• CVE-2026-41216

  An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to…

  vtk · vtk

  High7.5
• CVE-2026-42057

  An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead…

  vtk · vtk

  High7.5
• CVE-2026-53918

  odhcpd DHCPv6 IA dangling first pointer use-after-free

  openwrt · odhcpd

  High8.8
• CVE-2026-86845

  Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup

  Red Hat · Red Hat Enterprise Linux 10

  Medium6.5
• CVE-2026-19939

  Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption

  zephyrproject · zephyr

  Medium6.3
• CVE-2026-104039

  Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder

  Red Hat · Red Hat Enterprise Linux 10

  Medium4.7
• CVE-2026-104034

  Sssd: sssd: denial of service via use-after-free in kcm ticket renewal

  Red Hat · Red Hat Enterprise Linux 10

  Medium4.7
• CVE-2026-102010

  Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

  Red Hat · Red Hat Enterprise Linux 10

  High7.0
• CVE-2026-65970

  OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`

  AcademySoftwareFoundation · OpenImageIO

  Medium5.3

Vendors it comes up for most

1. Linux18
2. Red Hat17
3. Mozilla15
4. azure-rtos7
5. GNU4
6. Wireshark Foundation3
7. F52
8. FreeRDP2
9. squid-cache2
10. vtk2