Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-190
Weakness type CWE-190 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 636 | 538 | 21 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▅▆▆█▁
2025-11 1 · 2025-12 2 · 2026-01 0 · 2026-02 4 · 2026-03 7 · 2026-04 7 · 2026-05 33 · 2026-06 93 · 2026-07 107 · 2026-08 123 · 2026-09 157 · 2026-10 7
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2021-30860 | 7.8 | 99.5 | KEV | Apple Multiple Products |
| CVE-2015-8651 | 8.8 | 99.3 | KEV | Adobe Flash Player |
| CVE-2013-2729 | 8.8 | 99.3 | KEV | Adobe Reader and Acrobat |
| CVE-2018-6065 | 8.8 | 99.1 | KEV | Google Chromium V8 |
| CVE-2023-32434 | 7.8 | 98.9 | KEV | Apple Multiple Products |
| CVE-2011-1823 | 7.8 | 98.6 | KEV | Android Android OS |
| CVE-2022-0185 | 8.4 | 97.9 | KEV | Linux Kernel |
| CVE-2012-5054 | 8.8 | 97.5 | KEV | Adobe Flash Player |
| CVE-2016-1010 | 8.8 | 97.3 | KEV | Adobe Flash Player and AIR |
| CVE-2023-6345 | 9.6 | 96.9 | KEV | Google Chromium Skia |
| CVE-2018-14634 | 7.8 | 96.6 | KEV | Linux Kernel |
| CVE-2024-38080 | 7.8 | 94.1 | KEV | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2021-30952 | 8.8 | 93.9 | KEV | Apple Multiple Products |
| CVE-2023-2136 | 9.6 | 92.8 | KEV | Google Chromium Skia |
| CVE-2023-21823 | 7.8 | 92.6 | KEV | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2025-24985 | 7.8 | 89.8 | KEV | Windows Fast FAT File System Driver Remote Code Execution Vulnerability |
| CVE-2021-30663 | 7.8 | 88.9 | KEV | Apple Multiple Products |
| CVE-2013-2596 | 7.8 | 87.8 | KEV | Linux Kernel |
| CVE-2025-48595 | 8.4 | 76.6 | KEV | Android Framework |
| CVE-2026-21385 | 7.8 | 68.7 | KEV | Integer Overflow or Wraparound in Graphics |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 127 |
| 58 | |
| linux | 57 |
| red hat | 34 |
| apple | 26 |
| adobe | 23 |
| ibm | 17 |
| apache | 10 |
| academysoftwarefoundation | 9 |
| libexpat project | 9 |
| mozilla | 9 |
| gimp | 7 |
| gnome | 7 |
| nvidia | 7 |
| strukturag | 7 |
