Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-763
Weakness type CWE-763 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 35 | 27 | 0 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▂▁▃▁▁▁▁▂▁▂▁▁▁▁▁▁▁▁▁▂▁▁▁▂▃▄▄▄▇█
2025-11 0 · 2025-12 1 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 1 · 2026-05 2 · 2026-06 3 · 2026-07 3 · 2026-08 3 · 2026-09 7 · 2026-10 8
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2020-36224 | 7.5 | 91.0 | — | — |
| CVE-2025-48431 | 7.5 | 64.5 | — | Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid po… |
| CVE-2026-83889 | 8.8 | 59.4 | — | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-97011 | 8.8 | 53.1 | — | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-9516 | 7.5 | 48.5 | — | Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM pr… |
| CVE-2025-11838 | 8.7 | 41.1 | — | WatchGuard Firebox iked Memory Corruption Vulnerability |
| CVE-2026-15718 | 4.3 | 40.7 | — | Invalid pointer in the JavaScript: WebAssembly component |
| CVE-2026-19315 | 9.3 | 38.2 | — | Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution |
| CVE-2026-68908 | 5.3 | 37.7 | — | libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string … |
| CVE-2026-74947 | 8.8 | 37.6 | — | Privilege escalation due to invalid pointer in the Graphics component |
| CVE-2026-74860 | 8.5 | 37.5 | — | Libxml2: double-free/uaf in libxml2 python bindings |
| CVE-2026-52993 | 9.8 | 33.1 | — | tipc: fix double-free in tipc_buf_append() |
| CVE-2026-83735 | 7.8 | 30.6 | — | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85850 | 7.8 | 26.4 | — | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-84131 | 8.8 | 25.4 | — | Privilege escalation due to invalid pointer in the Graphics component |
| CVE-2026-77500 | 7.8 | 25.0 | — | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2022-49160 | 5.5 | 24.2 | — | scsi: qla2xxx: Fix crash during module load unload test |
| CVE-2026-108133 | 7.8 | 23.2 | — | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2024-40979 | 5.5 | 21.5 | — | wifi: ath12k: fix kernel crash during resume |
| CVE-2024-42132 | 7.1 | 20.1 | — | bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 12 |
| microsoft | 8 |
| mozilla | 4 |
| watchguard | 2 |
| amd | 1 |
| apache | 1 |
| asus | 1 |
| foxit software | 1 |
| mz-automation | 1 |
| red hat | 1 |
| rurban | 1 |
