Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-416
Weakness type CWE-416 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 2838 | 1875 | 105 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▁▂▂▁▂▁▂▁▂▂▁▁▁▂▁▁▁▁▁▁▂▃█▇▄█▁
2025-11 4 · 2025-12 2 · 2026-01 29 · 2026-02 15 · 2026-03 9 · 2026-04 62 · 2026-05 173 · 2026-06 493 · 2026-07 395 · 2026-08 219 · 2026-09 472 · 2026-10 8
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2019-0708 | 9.8 | 100.0 | KEV | Microsoft Remote Desktop Services |
| CVE-2021-31166 | 9.8 | 100.0 | KEV | HTTP Protocol Stack Remote Code Execution Vulnerability |
| CVE-2015-5119 | 7.8 | 99.9 | KEV | Adobe Flash Player |
| CVE-2010-3962 | 8.1 | 99.9 | KEV | Microsoft Internet Explorer |
| CVE-2015-0313 | 7.8 | 99.9 | KEV | Adobe Flash Player |
| CVE-2015-5122 | 7.8 | 99.8 | KEV | Adobe Flash Player |
| CVE-2010-0249 | 8.8 | 99.8 | KEV | Microsoft Internet Explorer |
| CVE-2018-15982 | 7.8 | 99.8 | KEV | Adobe Flash Player |
| CVE-2018-4878 | 7.8 | 99.8 | KEV | Adobe Flash Player |
| CVE-2013-3893 | 8.8 | 99.8 | KEV | Microsoft Internet Explorer |
| CVE-2016-9079 | 7.5 | 99.8 | KEV | Mozilla Firefox, Firefox ESR, and Thunderbird |
| CVE-2020-0674 | 7.5 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2014-0322 | 8.8 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2020-3992 | 9.8 | 99.7 | KEV | VMware ESXi |
| CVE-2014-1776 | 9.8 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2010-0806 | 8.8 | 99.6 | KEV | Microsoft Internet Explorer |
| CVE-2009-4324 | 7.8 | 99.6 | KEV | Adobe Acrobat and Reader |
| CVE-2021-26411 | 8.8 | 99.6 | KEV | Internet Explorer Memory Corruption Vulnerability |
| CVE-2012-4969 | 8.1 | 99.6 | KEV | Microsoft Internet Explorer |
| CVE-2012-4792 | 8.8 | 99.6 | KEV | Microsoft Internet Explorer |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 995 |
| microsoft | 638 |
| 631 | |
| mozilla | 89 |
| apple | 69 |
| adobe | 41 |
| foxit software | 25 |
| red hat | 21 |
| zephyrproject | 19 |
| nvidia | 17 |
| arm | 10 |
| imagemagick | 10 |
| mongodb | 10 |
| apache | 9 |
| freebsd | 9 |
