Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-193
Weakness type CWE-193 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 85 | 68 | 1 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▄█▅▅▇▆
2025-11 0 · 2025-12 0 · 2026-01 1 · 2026-02 0 · 2026-03 1 · 2026-04 0 · 2026-05 7 · 2026-06 16 · 2026-07 9 · 2026-08 9 · 2026-09 14 · 2026-10 11
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2021-3156 | 7.8 | 100.0 | KEV | Sudo Sudo |
| CVE-2019-19906 | 7.5 | 94.7 | — | — |
| CVE-2021-46848 | 9.1 | 82.7 | — | — |
| CVE-2019-19721 | 7.8 | 80.3 | — | — |
| CVE-2026-86297 | 8.2 | 65.7 | — | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one |
| CVE-2026-50497 | 7.5 | 59.6 | — | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2026-42015 | 5.3 | 59.6 | — | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling |
| CVE-2026-48689 | 9.8 | 59.2 | — | — |
| CVE-2026-43964 | 7.5 | 58.5 | — | — |
| CVE-2026-54410 | 7.8 | 57.8 | — | nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field |
| CVE-2021-3999 | 7.8 | 56.1 | — | — |
| CVE-2026-97741 | 8.8 | 55.1 | — | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-102857 | 8.8 | 55.1 | — | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-7831 | 7.6 | 53.7 | — | UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing |
| CVE-2026-65927 | 7.5 | 51.6 | — | Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control |
| CVE-2026-11771 | 7.0 | 51.6 | — | — |
| CVE-2026-49127 | 8.8 | 51.3 | — | Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be |
| CVE-2026-12413 | 7.5 | 47.5 | — | IKEv2 Denial of Service via malformed fragmentation |
| CVE-2020-27171 | 6.0 | 46.4 | — | — |
| CVE-2026-56787 | 6.9 | 45.7 | — | RTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 18 |
| microsoft | 7 |
| red hat | 4 |
| imagemagick | 2 |
| openvpn | 2 |
| rti | 2 |
| trusted domain project | 2 |
| uvnc | 2 |
| alsa project | 1 |
| apache | 1 |
| canboat | 1 |
| corazawaf | 1 |
| d-link | 1 |
| debevv | 1 |
| freebsd | 1 |
