boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-364

Weakness type CWE-364 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
850

Monthly trend

█▁▁▁▁▁▁▁▁▁▅▁▁▁▁▁▁▁▁▁▁▅██▁▁▁▁

2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 2 · 2026-06 2 · 2026-07 0 · 2026-08 0 · 2026-09 0 · 2026-10 0

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2024-63878.199.9—Openssh: regresshion - race condition in ssh allows rce/dos
CVE-2024-64097.098.1—Openssh: possible remote code execution due to a race condition in signal handling affe…
CVE-2025-45984.768.0—Systemd-coredump: race condition that allows a local attacker to crash a suid program a…
CVE-2026-420027.545.8—Concurrency and locking defects in GSS-TSIG
CVE-2026-314747.82.9—can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
CVE-2026-460907.82.9—ALSA: aloop: Fix peer runtime UAF during format-change stop
CVE-2026-529107.81.0—bpf: Free reuseport cBPF prog after RCU grace period.
CVE-2026-531857.81.0—zram: fix use-after-free in zram_bvec_write_partial()

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
linux4
red hat3
powerdns1