Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-170
Weakness type CWE-170 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 13 | 10 | 0 |
Monthly trend
▅▁▁▁▁▁▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▅▅▃█▁
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 2 · 2026-07 2 · 2026-08 1 · 2026-09 4 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2023-36906 | 7.5 | 79.8 | — | Windows Cryptographic Services Information Disclosure Vulnerability |
| CVE-2023-36907 | 7.5 | 76.8 | — | Windows Cryptographic Services Information Disclosure Vulnerability |
| CVE-2024-43474 | 7.5 | 68.6 | — | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-70587 | 7.5 | 62.4 | — | Windows Remote Desktop Protocol Information Disclosure Vulnerability |
| CVE-2026-42010 | 9.8 | 59.7 | — | Gnutls: gnutls: authentication bypass via nul character in username |
| CVE-2026-45798 | 7.5 | 58.8 | — | Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-au… |
| CVE-2026-5067 | 9.8 | 57.2 | — | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocke… |
| CVE-2026-55738 | 8.7 | 44.3 | — | Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name … |
| CVE-2026-78506 | 5.5 | 43.5 | — | Microsoft Office Word Information Disclosure Vulnerability |
| CVE-2026-44452 | 5.9 | 33.2 | — | h2o is vulnerable to heap overrun |
| CVE-2026-73324 | 5.3 | 13.7 | — | VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability |
| CVE-2026-12386 | 3.9 | 2.4 | — | Buffer Overflow in TUBITAK BILGEM's Pardus Pen |
| CVE-2026-81882 | 6.1 | 2.3 | — | radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist pa… |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 5 |
| h2o | 1 |
| radareorg | 1 |
| red hat | 1 |
| rxi | 1 |
| tubitak bilgem software technologies research institute | 1 |
| videolan | 1 |
| wazuh | 1 |
| zephyrproject-rtos | 1 |
