Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-457
Weakness type CWE-457 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 130 | 126 | 0 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃█▆▂▄▂
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 11 · 2026-06 47 · 2026-07 35 · 2026-08 8 · 2026-09 18 · 2026-10 7
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-10973 | 7.4 | 61.7 | — | — |
| CVE-2024-26882 | 7.8 | 52.0 | — | net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() |
| CVE-2022-42432 | 4.4 | 51.0 | — | — |
| CVE-2026-91963 | 7.1 | 50.8 | — | FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc |
| CVE-2021-3928 | 7.8 | 49.4 | — | Use of Uninitialized Variable in vim/vim |
| CVE-2026-17667 | 6.5 | 42.6 | — | — |
| CVE-2026-17668 | 6.5 | 42.6 | — | — |
| CVE-2026-17714 | 6.5 | 42.6 | — | — |
| CVE-2026-14405 | 9.6 | 41.7 | — | — |
| CVE-2026-78935 | 9.6 | 41.7 | — | — |
| CVE-2026-17077 | 5.3 | 40.8 | — | IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM |
| CVE-2026-19212 | 2.1 | 39.3 | — | WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable |
| CVE-2026-17689 | 4.3 | 38.0 | — | — |
| CVE-2026-26824 | 6.5 | 37.9 | — | — |
| CVE-2026-15132 | 8.8 | 37.7 | — | — |
| CVE-2026-66859 | 8.7 | 35.4 | — | Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route |
| CVE-2026-84391 | 6.5 | 33.8 | — | — |
| CVE-2026-15766 | 6.5 | 33.0 | — | — |
| CVE-2026-19160 | 3.1 | 32.6 | — | — |
| CVE-2026-9963 | 7.5 | 32.1 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| 94 | |
| mozilla | 7 |
| apple | 3 |
| canonical | 2 |
| ibm | 2 |
| linux | 2 |
| red hat | 2 |
| wireshark foundation | 2 |
| academysoftwarefoundation | 1 |
| apache | 1 |
| apcupsd | 1 |
| eclipse foundation | 1 |
| fortinet | 1 |
| freerdp | 1 |
| mongodb | 1 |
