Reference page — cumulative record through Tuesday, October 20, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-667
Weakness type CWE-667 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 229 | 105 | 2 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▁▆▂▂▂▃▂▂▂▁▄▃▂▂▁▂▁▂▁▁▁▂▂▂▃▆█▆▂▂▂
2025-11 0 · 2025-12 1 · 2026-01 5 · 2026-02 3 · 2026-03 3 · 2026-04 7 · 2026-05 21 · 2026-06 31 · 2026-07 24 · 2026-08 4 · 2026-09 4 · 2026-10 3
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2021-1782 | 7.0 | 82.4 | KEV | Apple Multiple Products |
| CVE-2025-43510 | 7.8 | 27.8 | KEV | Apple Multiple Products |
| CVE-2023-52699 | 5.3 | 61.4 | — | sysv: don't call sb_bread() with pointers_lock held |
| CVE-2024-40980 | 5.5 | 54.4 | — | drop_monitor: replace spin_lock by raw_spin_lock |
| CVE-2024-41036 | 5.5 | 54.2 | — | net: ks8851: Fix deadlock with the SPI chip variant |
| CVE-2026-43469 | 7.5 | 52.3 | — | xprtrdma: Decrement re_receiving on the early exit paths |
| CVE-2024-35971 | 5.5 | 51.9 | — | net: ks8851: Handle softirqs at the end of IRQ thread to fix hang |
| CVE-2026-31557 | 7.5 | 49.2 | — | nvmet: move async event work off nvmet-wq |
| CVE-2026-72100 | 8.8 | 47.7 | — | dm-integrity: fix a bug if the bio is out of limits |
| CVE-2021-47587 | 5.5 | 44.7 | — | net: systemport: Add global locking for descriptor lifecycle |
| CVE-2026-46031 | 7.5 | 43.5 | — | net: ks8851: Reinstate disabling of BHs around IRQ handler |
| CVE-2024-39468 | 5.5 | 43.5 | — | smb: client: fix deadlock in smb2_find_smb_tcon() |
| CVE-2024-58087 | 8.1 | 42.5 | — | ksmbd: fix racy issue from session lookup and expire |
| CVE-2025-68770 | 7.5 | 42.3 | — | bnxt_en: Fix XDP_TX path |
| CVE-2026-64067 | 9.8 | 41.7 | — | netfs: Fix missing barriers when accessing stream->subrequests locklessly |
| CVE-2026-64068 | 9.8 | 41.7 | — | netfs: Fix missing locking around retry adding new subreqs |
| CVE-2021-47041 | 5.5 | 41.1 | — | nvmet-tcp: fix incorrect locking in state_change sk callback |
| CVE-2026-43253 | 7.5 | 40.6 | — | iommu/amd: move wait_on_sem() out of spinlock |
| CVE-2026-52946 | 7.5 | 39.1 | — | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling |
| CVE-2026-64232 | 9.8 | 38.3 | — | block: recompute nr_integrity_segments in blk_insert_cloned_request |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 204 |
| xen | 3 |
| apple | 2 |
| nvidia | 2 |
| dell | 1 |
| gitea | 1 |
| 1 | |
| ibm | 1 |
| nationalsecurityagency | 1 |
| nezhahq | 1 |
| open-telemetry | 1 |
| red hat | 1 |
| ruby-concurrency | 1 |
| zephyrproject | 1 |
