Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-191
Weakness type CWE-191 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 247 | 215 | 2 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▄▅▇▆█
2025-11 0 · 2025-12 0 · 2026-01 1 · 2026-02 0 · 2026-03 0 · 2026-04 10 · 2026-05 10 · 2026-06 26 · 2026-07 27 · 2026-08 46 · 2026-09 41 · 2026-10 54
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2014-0497 | 8.8 | 100.0 | KEV | Adobe Flash Player |
| CVE-2021-31956 | 7.8 | 97.7 | KEV | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2020-36221 | 7.5 | 99.7 | — | — |
| CVE-2020-36228 | 7.5 | 99.7 | — | — |
| CVE-2020-6096 | 8.1 | 92.7 | — | — |
| CVE-2019-5459 | 7.1 | 86.3 | — | — |
| CVE-2024-30070 | 7.5 | 83.1 | — | DHCP Server Service Denial of Service Vulnerability |
| CVE-2019-13602 | 7.8 | 81.4 | — | — |
| CVE-2026-85436 | 8.7 | 81.3 | — | MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length |
| CVE-2023-36909 | 6.5 | 81.0 | — | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2024-0565 | 7.4 | 80.4 | — | Kernel: cifs filesystem decryption improper input validation remote code execution vuln… |
| CVE-2026-63362 | 8.2 | 78.4 | — | o6 Automation open62541 Integer Underflow |
| CVE-2026-58058 | 6.9 | 73.0 | — | Nmap - Integer Underflow in IPv6 Extension Header Parsing |
| CVE-2023-21684 | 8.8 | 70.0 | — | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-83855 | 7.5 | 67.7 | — | Windows WLAN Service Denial of Service Vulnerability |
| CVE-2026-66307 | 7.5 | 67.0 | — | Skype for Business and Lync Denial of Service Vulnerability |
| CVE-2026-49181 | 9.8 | 66.9 | — | Windows DHCP Client Elevation of Privilege Vulnerability |
| CVE-2026-102192 | 7.5 | 66.3 | — | Windows Failover Cluster Denial of Service Vulnerability |
| CVE-2023-35387 | 8.8 | 64.0 | — | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
| CVE-2026-69276 | 9.8 | 61.4 | — | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| microsoft | 67 |
| linux | 33 |
| red hat | 14 |
| adobe | 12 |
| watchguard | 6 |
| ibm | 5 |
| apache | 4 |
| freerdp | 4 |
| mongodb | 4 |
| netatalk | 4 |
| juniper networks | 3 |
| sap_se | 3 |
| zephyrproject | 3 |
| absolute security | 2 |
| eclipse foundation | 2 |
