Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-379
Weakness type CWE-379 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 15 | 12 | 0 |
Monthly trend
▃▁▁▁▃▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▅█▆▃
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 0 · 2026-06 2 · 2026-07 2 · 2026-08 4 · 2026-09 3 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-11979 | 7.5 | 94.7 | — | — |
| CVE-2021-21290 | 5.5 | 77.9 | — | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary … |
| CVE-2021-29428 | 7.8 | 44.3 | — | Local privilege escalation through system temporary directory |
| CVE-2026-69482 | 7.1 | 38.7 | — | Windows Error Reporting Tampering Vulnerability |
| CVE-2026-12555 | 7.7 | 28.5 | — | HP Easy Start for macOS - Security Update |
| CVE-2026-85028 | 7.3 | 6.4 | — | Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Developme… |
| CVE-2026-54328 | 7.3 | 5.3 | — | Pi: Predictable temporary extension install paths allow local privilege escalation on s… |
| CVE-2026-82346 | 7.0 | 3.2 | — | HP ImageDiags - Potential Escalation of Privilege |
| CVE-2026-63693 | 6.6 | 2.9 | — | — |
| CVE-2026-14551 | 8.8 | 2.8 | — | Local Privilege Escalation in servereye client (sensorhub) |
| CVE-2026-7539 | 7.3 | 2.4 | — | HP Dock Accessory WMI Provider Installer Security Update |
| CVE-2026-46388 | 4.4 | 2.1 | — | osquery: Unprivileged users can temporarily read file carve contents |
| CVE-2026-50544 | 6.3 | 2.0 | — | NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and… |
| CVE-2026-86836 | 8.4 | 1.3 | — | — |
| CVE-2026-102740 | 5.8 | 0.8 | — | AsyncHttpClient: Resumable download index store is created world-readable and follows a… |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| hp | 3 |
| asynchttpclient | 1 |
| aws | 1 |
| dell | 1 |
| earendil-works | 1 |
| eclipse foundation | 1 |
| gradle | 1 |
| microsoft | 1 |
| netty | 1 |
| northebridge | 1 |
| osquery | 1 |
| servereye | 1 |
