Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-451
Weakness type CWE-451 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 240 | 234 | 2 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁█▅▂▄▃
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 2 · 2026-03 0 · 2026-04 2 · 2026-05 6 · 2026-06 94 · 2026-07 47 · 2026-08 19 · 2026-09 42 · 2026-10 22
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-38112 | 7.5 | 99.7 | KEV | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43461 | 8.8 | 99.0 | KEV | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2026-21527 | 6.5 | 94.8 | — | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-33118 | 4.3 | 52.4 | — | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-35429 | 4.3 | 52.4 | — | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
| CVE-2026-45650 | 4.3 | 52.4 | — | Microsoft Bing Search Spoofing Vulnerability |
| CVE-2026-0391 | 6.5 | 49.7 | — | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
| CVE-2025-29796 | 4.7 | 47.5 | — | Microsoft Edge for iOS Spoofing Vulnerability |
| CVE-2026-64735 | 6.5 | 44.6 | — | — |
| CVE-2024-38082 | 4.7 | 41.3 | — | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2024-38093 | 4.3 | 41.3 | — | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-40416 | 4.3 | 41.0 | — | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
| CVE-2026-64730 | 6.5 | 40.3 | — | — |
| CVE-2026-42891 | 6.5 | 39.4 | — | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
| CVE-2026-45150 | 6.3 | 35.6 | — | Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing |
| CVE-2026-53829 | 8.5 | 34.8 | — | OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display |
| CVE-2026-33119 | 5.4 | 34.1 | — | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
| CVE-2026-9106 | 4.8 | 28.7 | — | UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized org… |
| CVE-2026-45488 | 5.9 | 28.5 | — | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2026-18487 | 5.4 | 25.7 | — | Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| 196 | |
| microsoft | 14 |
| mozilla | 10 |
| apple | 2 |
| symfony | 2 |
| the browser company of new york | 2 |
| better-auth | 1 |
| dropbox(hellosign) | 1 |
| dräger | 1 |
| f5 | 1 |
| foxit software | 1 |
| github | 1 |
| gnome | 1 |
| hcl software | 1 |
| mathworks | 1 |
