Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1050
Weakness type CWE-1050 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 10 | 9 | 0 |
Monthly trend
▅▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▅▅▁███
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 1 · 2026-06 1 · 2026-07 0 · 2026-08 2 · 2026-09 2 · 2026-10 2
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2023-1390 | 7.5 | 92.3 | — | — |
| CVE-2026-48779 | 7.5 | 60.0 | — | ws: Memory exhaustion DoS from tiny fragments and data chunks |
| CVE-2026-4634 | 7.5 | 57.7 | — | Keycloak: keycloak: denial of service via excessive processing of openid connect scope … |
| CVE-2026-44390 | 6.9 | 52.9 | — | Unbounded name compression in certain cases causes degradation of service |
| CVE-2026-71488 | 7.5 | 49.1 | — | league/commonmark: Quadratic-time denial of service when parsing crafted Markdown |
| CVE-2026-81736 | 7.5 | 45.9 | — | Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees |
| CVE-2026-100350 | 5.3 | 37.8 | — | kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression |
| CVE-2026-52681 | 3.1 | 20.8 | — | — |
| CVE-2026-85977 | 5.3 | 19.2 | — | Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper… |
| CVE-2026-94287 | 5.5 | 0.8 | — | Denial of service via unsigned underflow in libXpm's write path |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| red hat | 2 |
| getkin | 1 |
| isc | 1 |
| nlnet labs | 1 |
| open-xchange | 1 |
| thephpleague | 1 |
| websockets | 1 |
| x.org | 1 |
