Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-1285
Weakness type CWE-1285 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 16 | 14 | 0 |
Monthly trend
▃▃▁▁▁▁█▁▆▆▁█▃█
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 3 · 2026-04 0 · 2026-05 2 · 2026-06 2 · 2026-07 0 · 2026-08 3 · 2026-09 1 · 2026-10 3
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-32285 | 7.5 | 61.3 | — | Denial of service in github.com/buger/jsonparser |
| CVE-2026-107821 | 8.0 | 54.3 | — | MariaDB: insufficient validation of binary frm data when opening a table |
| CVE-2026-32286 | 7.5 | 50.1 | — | Denial of service in github.com/jackc/pgproto3/v2 |
| CVE-2025-2399 | 5.9 | 43.8 | — | Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series |
| CVE-2026-45352 | 7.5 | 40.5 | — | cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding |
| CVE-2025-8291 | 4.3 | 38.9 | — | ZIP64 End of Central Directory (EOCD) Locator record offset not checked |
| CVE-2026-53530 | 8.7 | 35.6 | — | ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice) |
| CVE-2026-9100 | 6.0 | 21.4 | — | Heap memory out of bounds read and crash in C Driver legacy GridFS file reader |
| CVE-2025-9189 | 8.5 | 19.5 | — | Out Of Bounds Write when parsing a DSB file with Digilent DASYLab |
| CVE-2026-12681 | 8.9 | 17.7 | — | — |
| CVE-2026-18485 | 8.5 | 5.6 | — | Local Privilege Escalation in NI-PAL |
| CVE-2026-8036 | 8.4 | 4.1 | — | Local privilege escalation in NI-PAL |
| CVE-2026-14479 | 5.5 | 3.9 | — | Denial of Service in Autodesk Installer IPC Channel |
| CVE-2026-20524 | 8.4 | 2.6 | — | — |
| CVE-2026-111555 | 6.0 | 1.1 | — | Luksmeta: missing slot-range validation permits out-of-gap device i/o |
| CVE-2026-31912 | 5.5 | 1.0 | — | OOBR in libpcap before 1.10.7 |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| ni | 2 |
| autodesk | 1 |
| digilent | 1 |
| erweixin | 1 |
| github.com/buger/jsonparser | 1 |
| github.com/jackc/pgproto3/v2 | 1 |
| 1 | |
| mariadb | 1 |
| measx | 1 |
| mediatek | 1 |
| mitsubishi electric | 1 |
| mongodb | 1 |
| python software foundation | 1 |
| red hat | 1 |
| the tcpdump group | 1 |
