Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-682 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 15 | 13 | 0 |
▂▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▂▁▅▂▅█
2025-09 0 · 2025-10 0 · 2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 1 · 2026-04 0 · 2026-05 3 · 2026-06 1 · 2026-07 3 · 2026-08 5
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-71479 | 9.1 | 42.0 | — | New API: Integer overflow in quota billing yields negative charges (self-crediting) |
| CVE-2025-4435 | 7.5 | 41.9 | — | Tarfile extracts filtered members when errorlevel=0 |
| CVE-2026-47247 | 7.5 | 37.4 | — | libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pi… |
| CVE-2026-16363 | 9.8 | 36.5 | — | JIT miscompilation in the JavaScript: WebAssembly component |
| CVE-2026-76043 | 8.8 | 32.1 | — | — |
| CVE-2026-44074 | 3.7 | 25.9 | — | Bitwise OR of errno values |
| CVE-2026-33487 | 7.5 | 22.5 | — | goxmldsig has validateSignature Loop Variable Capture Signature Bypass |
| CVE-2026-20270 | 8.6 | 18.9 | — | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-10512 | 2.3 | 18.3 | — | X25519 x86_64 assembly final reduction leaves non-canonical field element |
| CVE-2026-7836 | 3.1 | 17.6 | — | hextoint macro uppercase bug |
| CVE-2024-41011 | 7.8 | 13.2 | — | drm/amdkfd: don't allow mapping the MMIO HDP page with large pages |
| CVE-2026-10773 | 5.4 | 8.0 | — | Out-of-bounds read in DHCPv4 client message-type name lookup (net_dhcpv4_msg_type_name) |
| CVE-2023-7346 | 4.1 | 3.9 | — | Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript |
| CVE-2026-20763 | 4.6 | 1.6 | — | — |
| CVE-2026-55597 | 5.5 | 1.1 | — | ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of ar… |
| Vendor | CVEs |
|---|---|
| netatalk | 2 |
| cisco | 1 |
| 1 | |
| imagemagick | 1 |
| ledger | 1 |
| linux | 1 |
| mozilla | 1 |
| python software foundation | 1 |
| quantumnous | 1 |
| russellhaering | 1 |
| strukturag | 1 |
| wolfssl | 1 |
| zephyrproject | 1 |