Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-122
Weakness type CWE-122 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 1647 | 1502 | 21 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▄▅█▇
2025-11 1 · 2025-12 1 · 2026-01 14 · 2026-02 12 · 2026-03 5 · 2026-04 26 · 2026-05 66 · 2026-06 112 · 2026-07 196 · 2026-08 224 · 2026-09 444 · 2026-10 403
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2015-3113 | 7.8 | 100.0 | KEV | Adobe Flash Player |
| CVE-2009-3459 | 8.8 | 99.7 | KEV | Adobe Acrobat and Reader |
| CVE-2021-21017 | 8.8 | 99.7 | KEV | Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code… |
| CVE-2023-27997 | 9.8 | 99.7 | KEV | Fortinet FortiOS and FortiProxy SSL-VPN |
| CVE-2023-4911 | 7.8 | 99.2 | KEV | Glibc: buffer overflow in ld.so leading to privilege escalation |
| CVE-2024-38812 | 9.8 | 99.0 | KEV | Heap-overflow vulnerability |
| CVE-2023-28252 | 7.8 | 98.9 | KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2019-3568 | 9.8 | 98.2 | KEV | Meta Platforms WhatsApp |
| CVE-2024-49138 | 7.8 | 98.0 | KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2023-36036 | 7.8 | 97.0 | KEV | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2023-23376 | 7.8 | 95.8 | KEV | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2025-21333 | 7.8 | 95.6 | KEV | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2020-16010 | 9.6 | 93.6 | KEV | Google Chrome for Android UI |
| CVE-2024-30051 | 7.8 | 92.9 | KEV | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2025-24985 | 7.8 | 90.1 | KEV | Windows Fast FAT File System Driver Remote Code Execution Vulnerability |
| CVE-2025-25249 | 9.8 | 89.9 | KEV | — |
| CVE-2026-85880 | 7.8 | 89.4 | KEV | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2026-94127 | 9.3 | 82.4 | KEV | BIG-IP APM OAuth vulnerability |
| CVE-2025-24993 | 7.8 | 82.3 | KEV | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2025-21418 | 7.8 | 74.9 | KEV | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 1031 |
| 82 | |
| adobe | 61 |
| red hat | 30 |
| wireshark foundation | 21 |
| freerdp | 18 |
| ibm | 16 |
| vim | 15 |
| gnu | 12 |
| apache | 11 |
| f5 | 9 |
| academysoftwarefoundation | 8 |
| imagemagick | 8 |
| ffmpeg | 7 |
| freebsd | 7 |
