boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-400

Weakness type CWE-400 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals
CVEs all-timeCVEs YTDKEV all-time
5364875

Monthly trend

▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▆█▄

2025-09 4 · 2025-10 3 · 2025-11 1 · 2025-12 0 · 2026-01 2 · 2026-02 1 · 2026-03 6 · 2026-04 5 · 2026-05 48 · 2026-06 135 · 2026-07 205 · 2026-08 85

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2021-4422810.0100.0KEVApache Log4j2
CVE-2023-444877.5100.0KEVIETF HTTP/2
CVE-2026-454987.599.1KEVMicrosoft Defender Denial of Service Vulnerability
CVE-2023-381807.596.3KEV.NET and Visual Studio Denial of Service Vulnerability
CVE-2026-283187.594.5KEVSolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
CVE-2026-491607.598.9HTTP.sys Denial of Service Vulnerability
CVE-2026-554509.395.7Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
CVE-2024-16357.590.9Undertow: out-of-memory error after several closed connections with wildfly-http-client…
CVE-2023-381787.584.0.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2024-213427.583.8Windows DNS Client Denial of Service Vulnerability
CVE-2026-455917.582.9ASP.NET Core Denial of Service Vulnerability
CVE-2024-213867.582.7.NET Denial of Service Vulnerability
CVE-2025-266737.582.5Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2024-435417.582.2Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
CVE-2024-435067.582.1BranchCache Denial of Service Vulnerability
CVE-2024-435757.582.0Windows Hyper-V Denial of Service Vulnerability
CVE-2024-382367.581.9DHCP Server Service Denial of Service Vulnerability
CVE-2025-274697.581.8Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2024-435157.581.7Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
CVE-2024-381497.581.3BranchCache Denial of Service Vulnerability

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
oracle82
microsoft32
apache23
netty18
ibm17
apple13
elastic11
grafana11
linux9
adobe8
spring8
google6
py-pdf6
significant-gravitas6
erlang5