Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-189
Weakness type CWE-189 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 34 | 30 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▂█▁
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 2 · 2026-07 5 · 2026-08 2 · 2026-09 19 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2015-2470 | 9.3 | 98.0 | — | — |
| CVE-2014-0075 | 5.0 | 97.1 | — | — |
| CVE-2014-0099 | 4.3 | 95.2 | — | — |
| CVE-2026-86297 | 8.2 | 65.7 | — | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one |
| CVE-2026-7598 | 6.9 | 56.6 | — | libssh2 userauth.c userauth_password integer overflow |
| CVE-2026-86289 | 2.1 | 51.8 | — | Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow |
| CVE-2026-90715 | 5.5 | 49.5 | — | marcobambini Gravity udp json-parser gravity_json.c integer overflow |
| CVE-2026-90596 | 6.9 | 46.4 | — | embedded-graphics image_raw.rs new/bytes_per_row integer overflow |
| CVE-2026-93311 | 2.1 | 45.5 | — | Freedesktop Poppler SampledFunction Function.cc integer overflow |
| CVE-2026-90593 | 6.9 | 43.0 | — | embedded-graphics image_raw.rs draw_sub_image integer overflow |
| CVE-2026-94030 | 1.3 | 41.4 | — | SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow |
| CVE-2026-94090 | 5.3 | 34.7 | — | JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow |
| CVE-2023-21801 | 7.8 | 33.4 | — | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-82480 | 5.3 | 30.3 | — | NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow |
| CVE-2026-102804 | 5.5 | 26.7 | — | Nothings stb stb_hexwave.h hexwave_init integer overflow |
| CVE-2026-102805 | 5.5 | 26.7 | — | Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow |
| CVE-2026-101279 | 5.5 | 23.9 | — | Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow |
| CVE-2026-101014 | 5.5 | 22.8 | — | Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup o… |
| CVE-2026-100889 | 5.5 | 21.2 | — | Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one |
| CVE-2026-103222 | 6.3 | 19.0 | — | Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| freedesktop | 5 |
| radareorg | 5 |
| trusted domain project | 3 |
| justicerage | 2 |
| nothings | 2 |
| blosc | 1 |
| cilium | 1 |
| d-link | 1 |
| janet-lang | 1 |
| marcobambini | 1 |
| microsoft | 1 |
| msi | 1 |
| nasa | 1 |
| tencent | 1 |
