Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1050
Weakness type CWE-1050 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 8 | 7 | 0 |
Monthly trend
▅▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▅▅▁██▁
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 1 · 2026-06 1 · 2026-07 0 · 2026-08 2 · 2026-09 2 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2023-1390 | 7.5 | 92.1 | — | — |
| CVE-2026-48779 | 7.5 | 59.3 | — | ws: Memory exhaustion DoS from tiny fragments and data chunks |
| CVE-2026-81736 | 7.5 | 57.0 | — | Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees |
| CVE-2026-44390 | 6.9 | 52.1 | — | Unbounded name compression in certain cases causes degradation of service |
| CVE-2026-4634 | 7.5 | 51.9 | — | Keycloak: keycloak: denial of service via excessive processing of openid connect scope … |
| CVE-2026-71488 | 7.5 | 48.4 | — | league/commonmark: Quadratic-time denial of service when parsing crafted Markdown |
| CVE-2026-52681 | 3.1 | 20.2 | — | — |
| CVE-2026-94287 | 5.5 | 0.8 | — | Denial of service via unsigned underflow in libXpm's write path |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| isc | 1 |
| nlnet labs | 1 |
| open-xchange | 1 |
| red hat | 1 |
| thephpleague | 1 |
| websockets | 1 |
| x.org | 1 |
