Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-787
Weakness type CWE-787 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 1439 | 1059 | 138 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▂▁▁▁▁▁▂▁▃▅▆▇█▁
2025-11 1 · 2025-12 7 · 2026-01 20 · 2026-02 16 · 2026-03 27 · 2026-04 16 · 2026-05 68 · 2026-06 179 · 2026-07 188 · 2026-08 249 · 2026-09 287 · 2026-10 9
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-22457 | 9.8 | 100.0 | KEV | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| CVE-2025-0282 | 9.0 | 100.0 | KEV | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| CVE-2023-4863 | 8.8 | 100.0 | KEV | Google Chromium WebP |
| CVE-2023-34048 | 9.8 | 99.9 | KEV | VMware vCenter Server Out-of-Bounds Write Vulnerability |
| CVE-2008-2992 | 7.8 | 99.9 | KEV | Adobe Acrobat and Reader |
| CVE-2019-5544 | 9.8 | 99.9 | KEV | VMware VMware ESXi and Horizon DaaS |
| CVE-2015-1641 | 7.8 | 99.9 | KEV | Microsoft Office |
| CVE-2018-0798 | 8.8 | 99.9 | KEV | Microsoft Office |
| CVE-2021-4034 | 7.8 | 99.9 | KEV | Red Hat Polkit |
| CVE-2016-0189 | 7.5 | 99.8 | KEV | Microsoft Internet Explorer |
| CVE-2018-0802 | 7.8 | 99.8 | KEV | Microsoft Office |
| CVE-2025-9242 | 9.3 | 99.8 | KEV | WatchGuard Firebox iked Out of Bounds Write Vulnerability |
| CVE-2021-35211 | 9.0 | 99.8 | KEV | Serv-U Remote Memory Escape Vulnerability |
| CVE-2010-3333 | 7.8 | 99.8 | KEV | Microsoft Office |
| CVE-2011-2462 | 8.8 | 99.8 | KEV | Adobe Reader and Acrobat |
| CVE-2018-8174 | 7.5 | 99.8 | KEV | Microsoft Windows |
| CVE-2013-0640 | 7.8 | 99.7 | KEV | Adobe Reader and Acrobat |
| CVE-2021-31755 | 9.8 | 99.7 | KEV | Tenda AC11 Router |
| CVE-2023-27997 | 9.8 | 99.7 | KEV | Fortinet FortiOS and FortiProxy SSL-VPN |
| CVE-2009-3129 | 7.8 | 99.7 | KEV | Microsoft Excel |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 284 |
| 139 | |
| adobe | 108 |
| apple | 82 |
| ibm | 75 |
| microsoft | 56 |
| red hat | 44 |
| zephyrproject | 33 |
| nvidia | 29 |
| mediatek | 19 |
| academysoftwarefoundation | 18 |
| watchguard | 16 |
| apache | 12 |
| the document foundation | 12 |
| qualcomm | 11 |
