Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-400
Weakness type CWE-400 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 1080 | 995 | 8 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▁▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▁▁▁▁▁▂▂▁▁▁▁▁▃▁▁▂▁▁▁▃▁▂▁▁▃▁▂▂▁▂▁▁▂▁▁▁▁▁▁▂▂▃▅▂▁▁▃▅▃▂▄▃▄▂▂█▁▂▁
2024-02 4 · 2024-03 2 · 2024-04 1 · 2024-05 3 · 2024-06 2 · 2024-07 3 · 2024-08 1 · 2024-09 1 · 2024-10 8 · 2024-11 0 · 2024-12 1 · 2025-01 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2021-44228 | 10.0 | 100.0 | KEV | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other J… |
| CVE-2023-44487 | 7.5 | 100.0 | KEV | IETF HTTP/2 |
| CVE-2023-38180 | 7.5 | 96.5 | KEV | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2004-1464 | 5.9 | 91.9 | KEV | Cisco IOS |
| CVE-2020-3566 | 8.6 | 89.6 | KEV | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability |
| CVE-2020-3569 | 8.6 | 88.4 | KEV | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities |
| CVE-2026-28318 | 7.5 | 79.8 | KEV | SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability |
| CVE-2026-45498 | 7.5 | 69.3 | KEV | Microsoft Defender Denial of Service Vulnerability |
| CVE-2021-21341 | 7.5 | 99.6 | — | XStream can cause a Denial of Service |
| CVE-2022-29885 | 7.5 | 99.5 | — | EncryptInterceptor does not provide complete protection on insecure networks |
| CVE-2018-12122 | 7.5 | 98.7 | — | — |
| CVE-2021-21348 | 7.5 | 96.5 | — | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (Re… |
| CVE-2021-3737 | 7.5 | 96.3 | — | — |
| CVE-2018-12121 | 7.5 | 95.6 | — | — |
| CVE-2020-8492 | 6.5 | 93.8 | — | — |
| CVE-2021-37137 | 7.5 | 93.7 | — | — |
| CVE-2018-7164 | 7.5 | 93.6 | — | — |
| CVE-2021-37136 | 7.5 | 93.1 | — | — |
| CVE-2019-9674 | 7.5 | 92.9 | — | — |
| CVE-2021-31957 | 5.9 | 92.3 | — | ASP.NET Core Denial of Service Vulnerability |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| oracle | 126 |
| ibm | 40 |
| microsoft | 38 |
| apache | 32 |
| adobe | 28 |
| red hat | 22 |
| elastic | 20 |
| netty | 20 |
| hewlett packard enterprise (hpe) | 17 |
| apple | 15 |
| imagemagick | 15 |
| vllm-project | 15 |
| py-pdf | 14 |
| grafana | 13 |
| rabbitmq | 13 |
