Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-755
Weakness type CWE-755 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 65 | 46 | 3 |
Monthly trend
▂▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▂▁▁▁▂▁▁▁▂▁▁▁▁▁▁▁▁▁▁▂▁▁▂▁▁▂▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▂▁▂▂▁▁▁▂▂▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▄▄▆▂█▆
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 5 · 2026-06 5 · 2026-07 10 · 2026-08 2 · 2026-09 13 · 2026-10 10
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2017-5638 | 9.8 | 100.0 | KEV | Apache Struts |
| CVE-2020-7247 | 9.8 | 99.9 | KEV | OpenBSD OpenSMTPD |
| CVE-2021-38003 | 8.8 | 98.6 | KEV | Google Chromium V8 |
| CVE-2017-5664 | 7.5 | 97.0 | — | — |
| CVE-2019-19924 | 5.3 | 95.8 | — | — |
| CVE-2021-22922 | 6.5 | 91.1 | — | — |
| CVE-2019-20218 | 7.5 | 89.7 | — | — |
| CVE-2019-16866 | 7.5 | 89.0 | — | — |
| CVE-2021-46828 | 7.5 | 88.0 | — | — |
| CVE-2026-23666 | 7.5 | 70.6 | — | .NET Framework Denial of Service Vulnerability |
| CVE-2020-1071 | 6.8 | 63.3 | — | Windows Remote Access Common Dialog Elevation of Privilege Vulnerability |
| CVE-2026-105242 | 5.3 | 56.6 | — | Apache log4net: Request validation failure drops the event in the aspnet-request converter |
| CVE-2026-89025 | 8.7 | 54.8 | — | Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request |
| CVE-2026-53459 | 9.3 | 54.5 | — | Bambuddy's authentication fails open on database errors, allowing unauthenticated acces… |
| CVE-2024-26584 | 5.5 | 53.7 | — | net: tls: handle backlogging of crypto requests |
| CVE-2026-54632 | 7.5 | 52.9 | — | SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media s… |
| CVE-2026-44319 | 7.5 | 50.4 | — | free5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-co… |
| CVE-2026-44325 | 7.5 | 50.4 | — | free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Ref… |
| CVE-2026-59162 | 6.9 | 50.4 | — | Excelize: Negative shared-string index causes panic in GetCellValue and GetRows |
| CVE-2024-6594 | 8.7 | 49.6 | — | WatchGuard Firebox Single Sign-On Client Denial-of-Service |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| apache | 8 |
| linux | 6 |
| free5gc | 2 |
| jpadilla | 2 |
| microsoft | 2 |
| midnightbsd | 2 |
| nlnet labs | 2 |
| red hat | 2 |
| steeltoeoss | 2 |
| trusted domain project | 2 |
| @libp2p | 1 |
| @opentelemetry | 1 |
| ag-ui-protocol | 1 |
| auth0 | 1 |
| belden | 1 |
