Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-427
Weakness type CWE-427 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 113 | 96 | 2 |
Monthly trend
▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▂▁▁▁▁▁▁▁▂▃█▅█▆▃
2025-11 0 · 2025-12 1 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 3 · 2026-05 7 · 2026-06 23 · 2026-07 14 · 2026-08 24 · 2026-09 17 · 2026-10 8
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-3153 | 6.5 | 98.1 | KEV | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability |
| CVE-2020-3433 | 7.8 | 95.6 | KEV | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability |
| CVE-2020-8315 | 5.5 | 74.0 | — | — |
| CVE-2026-55015 | 5.5 | 61.5 | — | Microsoft Remote Help Denial of Service Vulnerability |
| CVE-2025-29802 | 7.3 | 60.6 | — | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2020-15523 | 7.8 | 60.4 | — | — |
| CVE-2025-29817 | 5.7 | 59.3 | — | Microsoft Power Automate Desktop Information Disclosure Vulnerability |
| CVE-2020-9290 | 7.8 | 57.7 | — | — |
| CVE-2026-65093 | 9.9 | 55.9 | — | — |
| CVE-2025-29803 | 7.3 | 54.1 | — | Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Priv… |
| CVE-2026-16860 | 9.9 | 54.0 | — | IBM i is Affected By Remote Code Execution Vulnerability [] |
| CVE-2019-5443 | 7.8 | 51.9 | — | — |
| CVE-2026-108390 | 9.9 | 51.3 | — | HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking |
| CVE-2026-54916 | 8.8 | 48.2 | — | NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missi… |
| CVE-2026-72980 | 5.5 | 46.2 | — | Windows Hello Security Feature Bypass Vulnerability |
| CVE-2026-32172 | 8.0 | 45.9 | — | Microsoft Power Apps Remote Code Execution Vulnerability |
| CVE-2026-54232 | 8.8 | 45.6 | — | vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile |
| CVE-2022-36271 | 7.8 | 42.3 | — | — |
| CVE-2026-7870 | 8.8 | 40.8 | — | IBM i is Affected by Privilege Escalation [] |
| CVE-2026-69923 | 7.8 | 40.2 | — | Windows AI Elevation of Privilege Vulnerability |
