Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-908
Weakness type CWE-908 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 245 | 169 | 4 |
Monthly trend
▁▁▁▁▁▁▁▁▁▂▂▂▁▂▁▂▁▁▂▁▁▁▁▂▂▂▁▁▁▁▁▁▁▃▄▆▇█▁
2025-11 0 · 2025-12 1 · 2026-01 1 · 2026-02 0 · 2026-03 1 · 2026-04 1 · 2026-05 12 · 2026-06 20 · 2026-07 37 · 2026-08 43 · 2026-09 52 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-5777 | 9.3 | 100.0 | KEV | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory o… |
| CVE-2026-85880 | 7.8 | 89.2 | KEV | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2024-50302 | 5.5 | 55.5 | KEV | HID: core: zero-initialize the report buffer |
| CVE-2024-29745 | 5.5 | 39.4 | KEV | Android Pixel |
| CVE-2024-12085 | 7.5 | 95.0 | — | Rsync: info leak via uninitialized stack contents |
| CVE-2024-43502 | 7.1 | 93.4 | — | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-38257 | 7.5 | 91.2 | — | Microsoft AllJoyn API Information Disclosure Vulnerability |
| CVE-2025-27474 | 6.5 | 77.5 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2024-43458 | 7.7 | 77.5 | — | Windows Networking Information Disclosure Vulnerability |
| CVE-2023-36913 | 7.5 | 76.3 | — | Microsoft Message Queuing Information Disclosure Vulnerability |
| CVE-2024-38260 | 8.8 | 75.3 | — | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
| CVE-2026-3497 | 2.7 | 68.4 | — | — |
| CVE-2026-72989 | 7.5 | 62.4 | — | Windows Failover Cluster Information Disclosure Vulnerability |
| CVE-2026-57982 | 6.5 | 61.4 | — | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-67386 | 6.5 | 61.4 | — | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-67648 | 6.5 | 61.4 | — | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-68776 | 6.5 | 61.4 | — | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-56190 | 9.8 | 60.8 | — | Remote Desktop Protocol Remote Code Execution Vulnerability |
| CVE-2026-50497 | 7.5 | 59.0 | — | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-58533 | 7.5 | 59.0 | — | Windows Remote Desktop Client Information Disclosure Vulnerability |
