Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-1285

Weakness type CWE-1285 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-time	CVEs YTD	KEV all-time
13	11	0

Monthly trend

▃▃▁▁▁▁█▁▆▆▁█▃▁

2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 3 · 2026-04 0 · 2026-05 2 · 2026-06 2 · 2026-07 0 · 2026-08 3 · 2026-09 1 · 2026-10 0

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVE	CVSS	EPSS %ile	KEV	Title
CVE-2026-32285	7.5	60.7	—	Denial of service in github.com/buger/jsonparser
CVE-2026-32286	7.5	49.4	—	Denial of service in github.com/jackc/pgproto3/v2
CVE-2025-2399	5.9	42.4	—	Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series
CVE-2026-45352	7.5	39.7	—	cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding
CVE-2026-53530	8.7	34.8	—	ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)
CVE-2025-8291	4.3	29.4	—	ZIP64 End of Central Directory (EOCD) Locator record offset not checked
CVE-2026-9100	6.0	20.8	—	Heap memory out of bounds read and crash in C Driver legacy GridFS file reader
CVE-2025-9189	8.5	18.9	—	Out Of Bounds Write when parsing a DSB file with Digilent DASYLab
CVE-2026-12681	8.9	17.3	—	—
CVE-2026-18485	8.5	5.4	—	Local Privilege Escalation in NI-PAL
CVE-2026-8036	8.4	3.9	—	Local privilege escalation in NI-PAL
CVE-2026-14479	5.5	3.7	—	Denial of Service in Autodesk Installer IPC Channel
CVE-2026-31912	5.5	1.0	—	OOBR in libpcap before 1.10.7

Most-affected vendors

Vendors with the most CVEs of this type
Vendor	CVEs
ni	2
autodesk	1
digilent	1
erweixin	1
github.com/buger/jsonparser	1
github.com/jackc/pgproto3/v2	1
google	1
measx	1
mitsubishi electric	1
mongodb	1
python software foundation	1
the tcpdump group	1
yhirose	1