Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-681
Weakness type CWE-681 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 37 | 33 | 0 |
Monthly trend
▂▁▁▁▂▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▂▃▃▄█▃
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 1 · 2026-04 1 · 2026-05 1 · 2026-06 4 · 2026-07 4 · 2026-08 5 · 2026-09 14 · 2026-10 3
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-6096 | 8.1 | 92.7 | — | — |
| CVE-2019-19317 | 9.8 | 91.6 | — | — |
| CVE-2021-27218 | 7.5 | 90.6 | — | — |
| CVE-2021-27219 | 7.5 | 87.4 | — | — |
| CVE-2026-4602 | 7.7 | 58.3 | — | — |
| CVE-2026-26178 | 8.8 | 56.4 | — | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-69438 | 8.1 | 52.5 | — | Microsoft JScript Remote Code Execution Vulnerability |
| CVE-2026-77412 | 8.9 | 43.2 | — | RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client |
| CVE-2026-53923 | 5.3 | 40.3 | — | vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer ove… |
| CVE-2026-55768 | 8.7 | 39.4 | — | GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a… |
| CVE-2026-55123 | 7.8 | 39.0 | — | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-82522 | 5.3 | 33.5 | — | libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation |
| CVE-2026-6426 | 4.4 | 32.1 | — | Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds a… |
| CVE-2026-19879 | 5.3 | 31.9 | — | Io.undertow/undertow: undertow: http response header integrity issue due to character t… |
| CVE-2026-88368 | 7.5 | 31.5 | — | — |
| CVE-2026-88362 | 7.5 | 26.3 | — | — |
| CVE-2026-88366 | 7.5 | 25.7 | — | — |
| CVE-2026-50402 | 7.8 | 25.1 | — | NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83872 | 7.8 | 23.2 | — | Windows TCP/IP Local Elevation of Privilege Vulnerability |
| CVE-2026-84963 | 6.3 | 22.3 | — | Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BS… |
