Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-782
Weakness type CWE-782 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 21 | 20 | 1 |
Monthly trend
▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▅▆▁█▂
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 1 · 2026-06 4 · 2026-07 6 · 2026-08 0 · 2026-09 8 · 2026-10 1
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2021-21551 | 8.8 | 99.6 | KEV | Dell dbutil Driver |
| CVE-2026-84408 | 8.7 | 49.0 | — | — |
| CVE-2026-8501 | 7.8 | 7.6 | — | CVE-2026-8501 |
| CVE-2026-80116 | 8.5 | 5.6 | — | PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo… |
| CVE-2026-57851 | 8.5 | 5.5 | — | MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers |
| CVE-2026-56129 | 6.8 | 5.4 | — | — |
| CVE-2026-80113 | 6.9 | 5.1 | — | PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo6… |
| CVE-2026-80117 | 6.9 | 5.1 | — | PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via Dir… |
| CVE-2025-15641 | 6.8 | 5.1 | — | Netskope Client Exposed IOCTL with Insufficient Access Controls |
| CVE-2026-9492 | 8.5 | 4.4 | — | GIGABYTE｜Gigabyte Control Center - Improper Access Control |
| CVE-2026-80115 | 6.9 | 4.0 | — | PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys M… |
| CVE-2026-108889 | 1.9 | 3.9 | — | Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C expose… |
| CVE-2026-8797 | 8.5 | 3.7 | — | — |
| CVE-2026-38764 | 7.8 | 3.5 | — | — |
| CVE-2026-75809 | 5.9 | 3.4 | — | — |
| CVE-2026-38765 | 7.8 | 3.0 | — | — |
| CVE-2026-38766 | 7.8 | 3.0 | — | — |
| CVE-2019-25764 | 7.3 | 1.8 | — | — |
| CVE-2026-6737 | 2.0 | 1.8 | — | — |
| CVE-2026-16004 | 5.9 | 0.4 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| asus | 5 |
| passmark software | 4 |
| dell | 1 |
| dynabook | 1 |
| gigabyte | 1 |
| micro-star international (msi) | 1 |
| nec | 1 |
| netskope | 1 |
| qualitysoft | 1 |
| symantec | 1 |
| toshiba | 1 |
| yungengxin | 1 |
