Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-770
Weakness type CWE-770 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 897 | 834 | 0 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▄▆▇█▆
2025-11 0 · 2025-12 3 · 2026-01 7 · 2026-02 1 · 2026-03 5 · 2026-04 12 · 2026-05 36 · 2026-06 98 · 2026-07 144 · 2026-08 187 · 2026-09 207 · 2026-10 137
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-28182 | 5.3 | 99.7 | — | Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage |
| CVE-2023-2650 | 6.5 | 99.5 | — | Possible DoS translating ASN.1 object identifiers |
| CVE-2023-24998 | 7.5 | 98.9 | — | Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts |
| CVE-2025-26466 | 5.9 | 98.6 | — | Openssh: denial-of-service in openssh |
| CVE-2022-32206 | 6.5 | 98.5 | — | — |
| CVE-2022-22950 | 6.5 | 98.5 | — | — |
| CVE-2022-32205 | 4.3 | 98.3 | — | — |
| CVE-2022-43945 | 7.5 | 97.7 | — | — |
| CVE-2021-35517 | 7.5 | 95.7 | — | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability |
| CVE-2021-33910 | 5.5 | 95.1 | — | — |
| CVE-2026-48933 | 7.5 | 89.6 | — | — |
| CVE-2026-42198 | 7.5 | 88.2 | — | pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS |
| CVE-2022-22971 | 6.5 | 87.8 | — | — |
| CVE-2017-18258 | 6.5 | 85.9 | — | — |
| CVE-2025-61726 | 7.5 | 83.2 | — | Memory exhaustion in query parameter parsing in net/url |
| CVE-2025-9784 | 7.5 | 83.2 | — | Undertow: undertow madeyoureset http/2 ddos vulnerability |
| CVE-2024-43567 | 7.5 | 83.1 | — | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2022-22970 | 5.3 | 80.0 | — | — |
| CVE-2024-12254 | 8.7 | 79.0 | — | Unbounded memory buffering in SelectorSocketTransport.writelines() |
| CVE-2026-45769 | 7.5 | 78.0 | — | ikev2: unbounded client transform storage can lead to resource exhaustion |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| apache | 60 |
| red hat | 43 |
| microsoft | 28 |
| linux | 27 |
| ibm | 21 |
| elastic | 18 |
| spring | 17 |
| rabbitmq | 15 |
| netty | 14 |
| legion of the bouncy castle | 11 |
| erlang | 10 |
| gitlab | 10 |
| vllm-project | 10 |
| datadog | 9 |
| go standard library | 9 |
