Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-189
Weakness type CWE-189 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 30 | 29 | 0 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▂█▁
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 2 · 2026-07 5 · 2026-08 2 · 2026-09 19 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-86297 | 8.2 | 65.1 | — | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one |
| CVE-2026-7598 | 6.9 | 55.9 | — | libssh2 userauth.c userauth_password integer overflow |
| CVE-2026-86289 | 2.1 | 51.1 | — | Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow |
| CVE-2026-90715 | 5.5 | 48.8 | — | marcobambini Gravity udp json-parser gravity_json.c integer overflow |
| CVE-2026-90596 | 6.9 | 45.6 | — | embedded-graphics image_raw.rs new/bytes_per_row integer overflow |
| CVE-2026-93311 | 2.1 | 44.8 | — | Freedesktop Poppler SampledFunction Function.cc integer overflow |
| CVE-2026-90593 | 6.9 | 42.3 | — | embedded-graphics image_raw.rs draw_sub_image integer overflow |
| CVE-2026-94030 | 1.3 | 40.6 | — | SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow |
| CVE-2026-93313 | 2.1 | 35.3 | — | Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow |
| CVE-2026-93314 | 2.1 | 35.3 | — | Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow |
| CVE-2026-94090 | 5.3 | 33.9 | — | JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow |
| CVE-2023-21801 | 7.8 | 32.6 | — | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-82480 | 5.3 | 29.5 | — | NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow |
| CVE-2026-102804 | 5.5 | 26.0 | — | Nothings stb stb_hexwave.h hexwave_init integer overflow |
| CVE-2026-102805 | 5.5 | 26.0 | — | Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow |
| CVE-2026-101279 | 5.5 | 23.3 | — | Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow |
| CVE-2026-101014 | 5.5 | 22.1 | — | Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup o… |
| CVE-2026-100889 | 5.5 | 20.6 | — | Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one |
| CVE-2026-103222 | 6.3 | 18.4 | — | Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow |
| CVE-2026-14757 | 1.9 | 9.8 | — | radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| freedesktop | 5 |
| radareorg | 5 |
| trusted domain project | 3 |
| justicerage | 2 |
| nothings | 2 |
| blosc | 1 |
| cilium | 1 |
| d-link | 1 |
| janet-lang | 1 |
| marcobambini | 1 |
| microsoft | 1 |
| msi | 1 |
| nasa | 1 |
