Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-131
Weakness type CWE-131 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 64 | 56 | 1 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▇▄▅█▄
2025-11 1 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 2 · 2026-05 4 · 2026-06 13 · 2026-07 7 · 2026-08 8 · 2026-09 15 · 2026-10 7
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-17087 | 7.8 | 92.6 | KEV | Windows Kernel Local Elevation of Privilege Vulnerability |
| CVE-2022-43945 | 7.5 | 97.7 | — | — |
| CVE-2026-42055 | 9.2 | 93.7 | — | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability |
| CVE-2019-5435 | 3.7 | 92.9 | — | — |
| CVE-2026-42945 | 9.2 | 88.7 | — | NGINX ngx_http_rewrite_module vulnerability |
| CVE-2023-6780 | 5.3 | 85.6 | — | Glibc: integer overflow in __vsyslog_internal() |
| CVE-2026-43501 | 9.8 | 61.9 | — | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows |
| CVE-2026-44420 | 8.8 | 57.6 | — | FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CL… |
| CVE-2026-69598 | 8.8 | 56.4 | — | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-78002 | 7.5 | 55.8 | — | Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() … |
| CVE-2026-42944 | 8.7 | 54.9 | — | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options |
| CVE-2026-39892 | 6.9 | 54.3 | — | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs |
| CVE-2026-45812 | 6.5 | 52.0 | — | Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler |
| CVE-2026-34986 | 7.5 | 50.2 | — | Go JOSE affect by a panic in JWE decryption |
| CVE-2023-45871 | 7.5 | 49.4 | — | — |
| CVE-2026-2049 | 7.8 | 48.4 | — | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-2050 | 7.8 | 48.4 | — | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-49841 | 9.8 | 47.9 | — | FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read |
| CVE-2026-75093 | 2.1 | 47.3 | — | sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size |
| CVE-2026-16924 | 7.5 | 44.7 | — | Vulnerabilities in IBM AIX and PowerVM VIOS |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| red hat | 8 |
| linux | 7 |
| freerdp | 3 |
| microsoft | 3 |
| f5 | 2 |
| ffmpeg | 2 |
| gimp | 2 |
| imagemagick | 2 |
| openvpn | 2 |
| academysoftwarefoundation | 1 |
| altera | 1 |
| apache | 1 |
| arduino-libraries | 1 |
| curl | 1 |
| eclipse foundation | 1 |
