Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-415
Weakness type CWE-415 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 295 | 176 | 6 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▄▂▂▂▂▂▂▂▁▂▁▁▂▂▂▁▂▂▁▁▂▁▁▃▅▄▆▄██
2025-11 1 · 2025-12 0 · 2026-01 4 · 2026-02 0 · 2026-03 0 · 2026-04 11 · 2026-05 21 · 2026-06 17 · 2026-07 30 · 2026-08 16 · 2026-09 39 · 2026-10 38
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2018-4990 | 8.8 | 98.5 | KEV | Adobe Acrobat and Reader |
| CVE-2014-0502 | 8.8 | 97.9 | KEV | Adobe Flash Player |
| CVE-2021-22600 | 6.6 | 93.8 | KEV | Double Free in net/packet/af_packet.c leading to priviledge escalation |
| CVE-2025-62215 | 7.0 | 91.3 | KEV | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-33824 | 9.8 | 75.7 | KEV | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability |
| CVE-2020-9859 | 7.8 | 56.7 | KEV | Apple Multiple Products |
| CVE-2023-25136 | 6.5 | 99.8 | — | — |
| CVE-2022-4450 | 7.5 | 98.1 | — | Double free after calling PEM_read_bio_ex |
| CVE-2019-5481 | 9.8 | 94.4 | — | — |
| CVE-2021-22945 | 9.1 | 93.8 | — | — |
| CVE-2022-2588 | 7.8 | 93.1 | — | — |
| CVE-2022-40304 | 7.8 | 93.0 | — | — |
| CVE-2020-36225 | 7.5 | 91.0 | — | — |
| CVE-2020-36223 | 7.5 | 90.8 | — | — |
| CVE-2020-6072 | 9.8 | 89.9 | — | — |
| CVE-2021-28041 | 7.1 | 89.0 | — | — |
| CVE-2022-42915 | 8.1 | 86.8 | — | — |
| CVE-2019-5460 | 5.5 | 84.6 | — | — |
| CVE-2022-2509 | 7.5 | 82.6 | — | — |
| CVE-2023-27537 | 5.9 | 79.3 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 128 |
| microsoft | 70 |
| red hat | 6 |
| apple | 5 |
| freerdp | 5 |
| zephyrproject | 4 |
| openssl | 3 |
| adobe | 2 |
| cisco | 2 |
| 2 | |
| imagemagick | 2 |
| mediatek | 2 |
| mongodb | 2 |
| samsung | 2 |
| alsa-project | 1 |