boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-909

Weakness type CWE-909 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals
CVEs all-timeCVEs YTDKEV all-time
200

Monthly trend

█▁▁▁▁▁▁▁▁▁▁▁▁

2025-09 0 · 2025-10 0 · 2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 0 · 2026-07 0 · 2026-08 0

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2025-386015.514.6wifi: ath11k: clear initialized flag for deinit-ed srng lists
CVE-2025-385325.55.0net: libwx: properly reset Rx ring descriptor

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
linux2