Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-908 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 161 | 89 | 1 |
▁▁▁▁▁▁▁▁▁▃▂▂▂▂▂▃▁▁▂▁▂▁▁▂▂▂▁▁▁▁▁▁▁▃▅█▆
2025-09 3 · 2025-10 2 · 2025-11 0 · 2025-12 1 · 2026-01 1 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 11 · 2026-06 21 · 2026-07 33 · 2026-08 22
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-5777 | 9.3 | 100.0 | KEV | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory o… |
| CVE-2024-12085 | 7.5 | 94.8 | — | Rsync: info leak via uninitialized stack contents |
| CVE-2024-43502 | 7.1 | 92.8 | — | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-38257 | 7.5 | 90.7 | — | Microsoft AllJoyn API Information Disclosure Vulnerability |
| CVE-2026-40364 | 8.4 | 90.6 | — | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2024-43458 | 7.7 | 76.5 | — | Windows Networking Information Disclosure Vulnerability |
| CVE-2023-36913 | 7.5 | 75.3 | — | Microsoft Message Queuing Information Disclosure Vulnerability |
| CVE-2025-27474 | 6.5 | 74.5 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2024-38260 | 8.8 | 74.2 | — | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
| CVE-2026-56190 | 9.8 | 62.7 | — | Remote Desktop Protocol Remote Code Execution Vulnerability |
| CVE-2026-57982 | 6.5 | 58.6 | — | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-50497 | 7.5 | 55.9 | — | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-58533 | 7.5 | 55.9 | — | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-58535 | 7.5 | 55.9 | — | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2026-50376 | 6.5 | 55.9 | — | Windows Remote Desktop Client Information Disclosure Vulnerability |
| CVE-2024-43537 | 6.5 | 54.0 | — | Windows Mobile Broadband Driver Denial of Service Vulnerability |
| CVE-2024-50033 | 7.1 | 53.2 | — | slip: make slhc_remember() more robust against malicious packets |
| CVE-2026-45736 | 4.4 | 52.0 | — | ws: Uninitialized memory disclosure |
| CVE-2024-38254 | 6.2 | 51.2 | — | Windows Authentication Information Disclosure Vulnerability |
| CVE-2024-38256 | 5.5 | 50.9 | — | Windows Kernel-Mode Driver Information Disclosure Vulnerability |