Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-457
Weakness type CWE-457 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 124 | 121 | 1 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃█▆▂▄▁
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 11 · 2026-06 47 · 2026-07 35 · 2026-08 8 · 2026-09 18 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-5777 | 9.3 | 100.0 | KEV | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory o… |
| CVE-2026-10973 | 7.4 | 61.1 | — | — |
| CVE-2024-26882 | 7.8 | 51.3 | — | net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() |
| CVE-2026-91963 | 7.1 | 50.0 | — | FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc |
| CVE-2025-56364 | 7.5 | 46.0 | — | — |
| CVE-2026-17667 | 6.5 | 41.8 | — | — |
| CVE-2026-17668 | 6.5 | 41.8 | — | — |
| CVE-2026-17714 | 6.5 | 41.8 | — | — |
| CVE-2026-14405 | 9.6 | 40.9 | — | — |
| CVE-2026-78935 | 9.6 | 40.9 | — | — |
| CVE-2026-17077 | 5.3 | 40.0 | — | IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM |
| CVE-2026-19212 | 2.1 | 38.5 | — | WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable |
| CVE-2026-17689 | 4.3 | 37.2 | — | — |
| CVE-2026-26824 | 6.5 | 37.1 | — | — |
| CVE-2026-15132 | 8.8 | 37.0 | — | — |
| CVE-2026-66859 | 8.7 | 34.6 | — | Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route |
| CVE-2026-84391 | 6.5 | 33.1 | — | — |
| CVE-2026-15766 | 6.5 | 32.2 | — | — |
| CVE-2026-19160 | 3.1 | 31.8 | — | — |
| CVE-2026-9963 | 7.5 | 31.4 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| 92 | |
| mozilla | 7 |
| apple | 3 |
| canonical | 2 |
| ibm | 2 |
| wireshark foundation | 2 |
| academysoftwarefoundation | 1 |
| apache | 1 |
| apcupsd | 1 |
| eclipse foundation | 1 |
| fortinet | 1 |
| freerdp | 1 |
| linux | 1 |
| mongodb | 1 |
| netscaler | 1 |
