Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-617
Weakness type CWE-617 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 229 | 204 | 1 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▃▆▅▄▇█
2025-11 0 · 2025-12 0 · 2026-01 3 · 2026-02 1 · 2026-03 4 · 2026-04 2 · 2026-05 13 · 2026-06 36 · 2026-07 28 · 2026-08 20 · 2026-09 44 · 2026-10 53
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2015-5477 | 7.5 | 99.9 | KEV | — |
| CVE-2020-36222 | 7.5 | 99.6 | — | — |
| CVE-2021-27212 | 7.5 | 99.3 | — | — |
| CVE-2020-36230 | 7.5 | 96.1 | — | — |
| CVE-2025-13878 | 7.5 | 95.4 | — | Malformed BRID/HHIT records can cause named to terminate unexpectedly |
| CVE-2021-3326 | 7.5 | 89.8 | — | — |
| CVE-2020-25709 | 7.5 | 88.8 | — | — |
| CVE-2020-25710 | 7.5 | 85.8 | — | — |
| CVE-2020-20211 | 6.5 | 84.7 | — | — |
| CVE-2018-19539 | 6.5 | 79.9 | — | — |
| CVE-2026-5946 | 7.5 | 76.8 | — | Invalid handling of CLASS != IN |
| CVE-2020-29562 | 4.8 | 76.6 | — | — |
| CVE-2024-33601 | 7.3 | 64.4 | — | nscd: netgroup cache may terminate daemon on memory allocation failure |
| CVE-2026-45815 | 7.5 | 63.1 | — | Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler |
| CVE-2026-27135 | 7.5 | 59.8 | — | nghttp2 Denial of service: Assertion failure due to the missing state validation |
| CVE-2026-41523 | 7.5 | 59.4 | — | vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows … |
| CVE-2025-15684 | 5.5 | 53.8 | — | Open5GS CER init.c diam_log_func assertion |
| CVE-2026-90785 | 5.5 | 53.1 | — | Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion |
| CVE-2026-90786 | 5.5 | 53.1 | — | Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion |
| CVE-2026-52718 | 6.5 | 52.6 | — | Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser … |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 36 |
| juniper networks | 24 |
| mongodb | 20 |
| freerdp | 7 |
| isc | 7 |
| nasa | 6 |
| red hat | 5 |
| vllm-project | 5 |
| zephyrproject | 5 |
| pexip | 4 |
| the libreswan project | 4 |
| zcashfoundation | 4 |
| ggml-org | 3 |
| mediatek | 3 |
| strukturag | 3 |
