boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-295

Weakness type CWE-295 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
3403185

Monthly trend

▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▄▃▆█▆

2025-11 0 · 2025-12 0 · 2026-01 2 · 2026-02 2 · 2026-03 6 · 2026-04 3 · 2026-05 23 · 2026-06 35 · 2026-07 32 · 2026-08 60 · 2026-09 90 · 2026-10 65

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2020-06018.199.8KEVMicrosoft Windows
CVE-2022-269238.899.7KEVActive Directory Domain Services Elevation of Privilege Vulnerability
CVE-2026-851029.898.9KEVImproper Certificate Validation in Quantum Security Gateway
CVE-2023-419915.596.4KEVApple Multiple Products
CVE-2023-209637.873.2KEVAndroid Framework
CVE-2021-34507.497.2—CA certificate check bypass with X509_V_FLAG_X509_STRICT
CVE-2021-229267.596.7——
CVE-2021-445335.395.3——
CVE-2020-11135.393.5—Windows Task Scheduler Security Feature Bypass Vulnerability
CVE-2020-82867.591.6——
CVE-2023-04647.590.4—Excessive Resource Usage Verifying X.509 Policy Constraints
CVE-2022-277827.587.5——
CVE-2021-283636.581.9——
CVE-2022-13435.381.7—OCSP_basic_verify may incorrectly verify the response signing certificate
CVE-2024-23796.378.9—QUIC certificate check bypass with wolfSSL
CVE-2023-04655.377.8—Invalid certificate policies in leaf certificates are silently ignored
CVE-2023-04665.377.8—Certificate policy check not enabled
CVE-2025-329895.373.3—Gnutls: vulnerability in gnutls sct extension parsing
CVE-2026-181298.173.0——
CVE-2026-89928.866.8——

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
dell33
wolfssl15
ibm14
microsoft14
red hat13
apache11
curl10
adobe9
legion of the bouncy castle7
openssl6
eclipse foundation5
erlang5
freerdp4
open ises4
apple3