Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-823 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 11 | 10 | 0 |
▃▁▁▁▃▁▃█▅▅
2025-11 1 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 1 · 2026-04 0 · 2026-05 1 · 2026-06 4 · 2026-07 2 · 2026-08 2
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2017-20211 | 8.6 | 51.8 | — | UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE |
| CVE-2026-32829 | 8.2 | 46.5 | — | lz4_flex: Decompression can leak information from uninitialized memory or reused output… |
| CVE-2026-12290 | 8.1 | 33.1 | — | Memory safety bug fixed in Firefox 152 |
| CVE-2026-72642 | 8.8 | 25.8 | — | Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inferen… |
| CVE-2026-46244 | 9.1 | 25.1 | — | netfilter: nft_inner: Fix IPv6 inner_thoff desync |
| CVE-2026-28764 | 7.8 | 10.6 | — | — |
| CVE-2026-34193 | 4.3 | 4.1 | — | GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_… |
| CVE-2026-21734 | 7.7 | 2.0 | — | GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation |
| CVE-2026-49744 | 7.8 | 1.5 | — | GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex() |
| CVE-2026-49745 | 7.8 | 1.5 | — | GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 |
| CVE-2026-49746 | 7.1 | 1.3 | — | GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem |
| Vendor | CVEs |
|---|---|
| imagination technologies | 5 |
| elastic | 1 |
| linux | 1 |
| mediaarea | 1 |
| mozilla | 1 |
| pseitz | 1 |
| ucancode.net software | 1 |