boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-475

Weakness type CWE-475 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals
CVEs all-timeCVEs YTDKEV all-time
420

Monthly trend

█▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▁▁▅

2025-09 0 · 2025-10 0 · 2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 0 · 2026-07 0 · 2026-08 1

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-420097.568.9Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
CVE-2023-48744.351.0Undefined Behavior for Input to API in Mutt
CVE-2023-48752.241.1Undefined Behavior for Input to API in Mutt
CVE-2026-193118.634.8Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
mutt2
aws1
github1
red hat1