Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-327
Weakness type CWE-327 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 88 | 77 | 0 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂█▃▄▅▁
2025-11 0 · 2025-12 0 · 2026-01 1 · 2026-02 0 · 2026-03 0 · 2026-04 2 · 2026-05 4 · 2026-06 29 · 2026-07 9 · 2026-08 14 · 2026-09 17 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-13777 | 7.4 | 97.7 | — | — |
| CVE-2018-0734 | 5.9 | 96.1 | — | Timing attack against DSA |
| CVE-2018-0737 | 5.9 | 96.0 | — | Cache timing vulnerability in RSA Key Generation |
| CVE-2022-2097 | 5.3 | 92.0 | — | AES OCB fails to encrypt some bytes |
| CVE-2018-0735 | 5.9 | 91.7 | — | Timing attack against ECDSA signature generation |
| CVE-2019-1563 | 3.7 | 90.0 | — | Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey |
| CVE-2020-26140 | 6.5 | 86.8 | — | — |
| CVE-2021-20305 | 8.1 | 77.4 | — | — |
| CVE-2022-1434 | 5.9 | 67.8 | — | Incorrect MAC key used in the RC4-MD5 ciphersuite |
| CVE-2026-48386 | 7.5 | 60.9 | — | ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327) |
| CVE-2024-28834 | 5.3 | 53.1 | — | Gnutls: vulnerable to minerva side-channel information leak |
| CVE-2026-5588 | 6.3 | 51.7 | — | PKIX draft CompositeVerifier accepts empty signature sequence as valid. |
| CVE-2026-20833 | 5.5 | 43.7 | — | Windows Kerberos Information Disclosure Vulnerability |
| CVE-2026-69382 | 5.9 | 39.3 | — | Microsoft Exchange Server Information Disclosure Vulnerability |
| CVE-2026-50086 | 9.8 | 36.9 | — | Aqara unauthenticated AES oracle |
| CVE-2026-76133 | 9.3 | 32.3 | — | Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm |
| CVE-2026-77151 | 6.3 | 29.1 | — | lin-snow Ech0 crypto.go MD5Encrypt risky encryption |
| CVE-2026-59116 | 6.8 | 28.7 | — | Windows Remote Desktop Security Feature Bypass Vulnerability |
| CVE-2026-66407 | 7.7 | 24.5 | — | — |
| CVE-2026-9261 | 7.6 | 23.7 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| ibm | 10 |
| openssl | 6 |
| dell | 4 |
| microsoft | 3 |
| ceph | 2 |
| hcl software | 2 |
| indian motorcycle | 2 |
| legion of the bouncy castle | 2 |
| oberon microsystems | 2 |
| wolfssl | 2 |
| yoanbernabeu | 2 |
| admin by request (abr) | 1 |
| adobe | 1 |
| andritz | 1 |
| aqara | 1 |
