Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-126
Weakness type CWE-126 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 158 | 135 | 0 |
Monthly trend
▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▂▁▂▁▃▅▅██
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 3 · 2026-03 0 · 2026-04 5 · 2026-05 1 · 2026-06 11 · 2026-07 22 · 2026-08 21 · 2026-09 35 · 2026-10 37
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2023-38172 | 7.5 | 80.1 | — | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2024-43475 | 7.3 | 78.4 | — | Microsoft Windows Admin Center Information Disclosure Vulnerability |
| CVE-2025-26664 | 6.5 | 78.3 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2025-26672 | 6.5 | 78.3 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2025-21203 | 6.5 | 76.3 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2023-21701 | 7.5 | 76.2 | — | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnera… |
| CVE-2023-21811 | 7.5 | 76.2 | — | Windows iSCSI Service Denial of Service Vulnerability |
| CVE-2023-21813 | 7.5 | 76.2 | — | Windows Secure Channel Denial of Service Vulnerability |
| CVE-2025-26676 | 6.5 | 75.8 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2022-2124 | 7.8 | 74.9 | — | Buffer Over-read in vim/vim |
| CVE-2026-20846 | 7.5 | 72.6 | — | GDI+ Denial of Service Vulnerability |
| CVE-2024-38265 | 8.8 | 72.4 | — | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2022-2175 | 7.8 | 70.4 | — | Buffer Over-read in vim/vim |
| CVE-2023-21720 | 5.3 | 68.2 | — | Microsoft Edge (Chromium-based) Tampering Vulnerability |
| CVE-2026-83685 | 6.5 | 66.0 | — | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-66312 | 8.8 | 65.1 | — | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-72932 | 7.5 | 63.0 | — | Windows Message Queuing Queue Manager Information Disclosure Vulnerability |
| CVE-2024-43595 | 6.5 | 62.8 | — | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2026-26155 | 6.5 | 62.0 | — | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
| CVE-2026-50468 | 6.5 | 62.0 | — | Microsoft SQL Server Information Disclosure Vulnerability |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 94 |
| qualcomm | 9 |
| red hat | 5 |
| wireshark foundation | 5 |
| mediatek | 4 |
| apache | 3 |
| canva | 3 |
| gnome | 3 |
| eclipse foundation | 2 |
| fortinet | 2 |
| rti | 2 |
| silabs.com | 2 |
| the gnu c library | 2 |
| vim | 2 |
| cisco | 1 |
