Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-805
Weakness type CWE-805 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 15 | 15 | 0 |
Monthly trend
▂▁▁▅▂█▃▂▂▁
2026-01 1 · 2026-02 0 · 2026-03 0 · 2026-04 3 · 2026-05 1 · 2026-06 6 · 2026-07 2 · 2026-08 1 · 2026-09 1 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-44893 | 7.5 | 57.7 | — | Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length |
| CVE-2026-8091 | 9.8 | 46.6 | — | Incorrect boundary conditions in the Audio/Video: Playback component |
| CVE-2026-41035 | 7.8 | 40.1 | — | — |
| CVE-2026-31607 | 9.8 | 36.2 | — | usbip: validate number_of_packets in usbip_pack_ret_submit() |
| CVE-2026-53877 | 6.3 | 35.8 | — | Heap buffer over-read in GDALRaster |
| CVE-2026-0716 | 4.8 | 30.5 | — | Libsoup: out-of-bounds read in libsoup websocket frame processing |
| CVE-2026-12087 | 9.1 | 29.1 | — | Socket versions before 2.041 for Perl have an out-of-bounds heap read |
| CVE-2026-12549 | 4.8 | 27.1 | — | Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver |
| CVE-2026-6695 | 5.5 | 25.4 | — | Gimp: gimp: remote code execution via crafted paa file |
| CVE-2026-1767 | 8.1 | 14.4 | — | Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow lead… |
| CVE-2026-15028 | 3.9 | 9.4 | — | Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended … |
| CVE-2026-53016 | 7.8 | 8.1 | — | crypto: ccp - copy IV using skcipher ivsize |
| CVE-2026-20290 | 5.8 | 7.8 | — | Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnera… |
| CVE-2026-1766 | 6.1 | 4.3 | — | Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and inf… |
| CVE-2026-6245 | 5.5 | 3.5 | — | Sssd: out-of-bounds read in the sssd |
