Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-273
Weakness type CWE-273 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 16 | 12 | 1 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▂█▂▅
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 1 · 2026-07 1 · 2026-08 5 · 2026-09 1 · 2026-10 3
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-38813 | 7.5 | 97.1 | KEV | Privilege escalation vulnerability |
| CVE-2019-18276 | 7.8 | 85.1 | — | — |
| CVE-2021-47129 | 7.8 | 37.3 | — | netfilter: nft_ct: skip expectations for confirmed conntrack |
| CVE-2026-101305 | 8.8 | 34.5 | — | Multiple jail filesystem root escapes |
| CVE-2026-58086 | 8.1 | 30.2 | — | ktrace(2) privilege incorrectly validated in jails |
| CVE-2026-44073 | 5.0 | 21.8 | — | seteuid failure ignored in auth modules |
| CVE-2026-101306 | 9.8 | 17.7 | — | Multiple jail filesystem root escapes |
| CVE-2023-52433 | 7.8 | 16.8 | — | netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction |
| CVE-2026-60085 | 8.7 | 16.0 | — | PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox |
| CVE-2026-101304 | — | 7.1 | — | Multiple jail filesystem root escapes |
| CVE-2026-54552 | 7.9 | 5.9 | — | sh _uid does not drop supplementary groups (incomplete privilege drop) |
| CVE-2026-61897 | 7.8 | 3.0 | — | accountsservice: incomplete privilege drop when running Ubuntu-specific language helper… |
| CVE-2026-58089 | 7.8 | 2.8 | — | hwpmc fails to detach PMCs during exec credential transitions |
| CVE-2026-49421 | 7.1 | 2.5 | — | unlinkat(2) ignores AT_RESOLVE_BENEATH flag |
| CVE-2026-80047 | 7.8 | 0.8 | — | Hugging Face Transformers library writes remote code to disk prior to consent check |
| CVE-2026-0099 | 7.8 | 0.0 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| freebsd | 6 |
| linux | 2 |
| amoffat | 1 |
| canonical | 1 |
| 1 | |
| hugging face | 1 |
| mervinpraison | 1 |
| netatalk | 1 |
