Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-416
Weakness type CWE-416 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 3478 | 2414 | 105 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▁▂▂▁▂▁▂▁▂▂▁▁▁▂▁▁▁▁▁▁▂▄█▇▄██
2025-11 4 · 2025-12 2 · 2026-01 33 · 2026-02 16 · 2026-03 19 · 2026-04 96 · 2026-05 189 · 2026-06 493 · 2026-07 405 · 2026-08 219 · 2026-09 473 · 2026-10 471
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2019-0708 | 9.8 | 100.0 | KEV | Microsoft Remote Desktop Services |
| CVE-2021-31166 | 9.8 | 100.0 | KEV | HTTP Protocol Stack Remote Code Execution Vulnerability |
| CVE-2015-5119 | 7.8 | 99.9 | KEV | Adobe Flash Player |
| CVE-2010-3962 | 8.1 | 99.9 | KEV | Microsoft Internet Explorer |
| CVE-2015-0313 | 7.8 | 99.9 | KEV | Adobe Flash Player |
| CVE-2015-5122 | 7.8 | 99.8 | KEV | Adobe Flash Player |
| CVE-2010-0249 | 8.8 | 99.8 | KEV | Microsoft Internet Explorer |
| CVE-2018-15982 | 7.8 | 99.8 | KEV | Adobe Flash Player |
| CVE-2018-4878 | 7.8 | 99.8 | KEV | Adobe Flash Player |
| CVE-2013-3893 | 8.8 | 99.8 | KEV | Microsoft Internet Explorer |
| CVE-2016-9079 | 7.5 | 99.8 | KEV | Mozilla Firefox, Firefox ESR, and Thunderbird |
| CVE-2020-0674 | 7.5 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2014-0322 | 8.8 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2020-3992 | 9.8 | 99.7 | KEV | VMware ESXi |
| CVE-2014-1776 | 9.8 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2010-0806 | 8.8 | 99.7 | KEV | Microsoft Internet Explorer |
| CVE-2009-4324 | 7.8 | 99.6 | KEV | Adobe Acrobat and Reader |
| CVE-2021-26411 | 8.8 | 99.6 | KEV | Internet Explorer Memory Corruption Vulnerability |
| CVE-2012-4969 | 8.1 | 99.6 | KEV | Microsoft Internet Explorer |
| CVE-2012-4792 | 8.8 | 99.6 | KEV | Microsoft Internet Explorer |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 1097 |
| microsoft | 966 |
| 696 | |
| mozilla | 113 |
| apple | 69 |
| adobe | 43 |
| red hat | 30 |
| foxit software | 25 |
| zephyrproject | 22 |
| nvidia | 17 |
| qualcomm | 14 |
| imagemagick | 12 |
| mongodb | 11 |
| arm | 10 |
| freebsd | 10 |
