Reference page — cumulative record through Tuesday, October 20, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-787
Weakness type CWE-787 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 1849 | 1348 | 139 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▂▁▁▁▂▁▂▂▃▅▆▇█▆
2025-11 2 · 2025-12 8 · 2026-01 25 · 2026-02 19 · 2026-03 32 · 2026-04 32 · 2026-05 91 · 2026-06 180 · 2026-07 210 · 2026-08 257 · 2026-09 288 · 2026-10 214
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-22457 | 9.8 | 100.0 | KEV | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| CVE-2025-0282 | 9.0 | 100.0 | KEV | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| CVE-2023-4863 | 8.8 | 100.0 | KEV | Google Chromium WebP |
| CVE-2023-34048 | 9.8 | 99.9 | KEV | VMware vCenter Server Out-of-Bounds Write Vulnerability |
| CVE-2008-2992 | 7.8 | 99.9 | KEV | Adobe Acrobat and Reader |
| CVE-2019-5544 | 9.8 | 99.9 | KEV | VMware VMware ESXi and Horizon DaaS |
| CVE-2015-1641 | 7.8 | 99.9 | KEV | Microsoft Office |
| CVE-2018-0798 | 8.8 | 99.9 | KEV | Microsoft Office |
| CVE-2021-4034 | 7.8 | 99.9 | KEV | Red Hat Polkit |
| CVE-2016-0189 | 7.5 | 99.8 | KEV | Microsoft Internet Explorer |
| CVE-2018-0802 | 7.8 | 99.8 | KEV | Microsoft Office |
| CVE-2025-9242 | 9.3 | 99.8 | KEV | WatchGuard Firebox iked Out of Bounds Write Vulnerability |
| CVE-2021-35211 | 9.0 | 99.8 | KEV | Serv-U Remote Memory Escape Vulnerability |
| CVE-2010-3333 | 7.8 | 99.8 | KEV | Microsoft Office |
| CVE-2011-2462 | 8.8 | 99.8 | KEV | Adobe Reader and Acrobat |
| CVE-2018-8174 | 7.5 | 99.8 | KEV | Microsoft Windows |
| CVE-2013-0640 | 7.8 | 99.7 | KEV | Adobe Reader and Acrobat |
| CVE-2021-31755 | 9.8 | 99.7 | KEV | Tenda AC11 Router |
| CVE-2023-27997 | 9.8 | 99.7 | KEV | Fortinet FortiOS and FortiProxy SSL-VPN |
| CVE-2009-3129 | 7.8 | 99.7 | KEV | Microsoft Excel |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 381 |
| 142 | |
| adobe | 135 |
| ibm | 92 |
| apple | 83 |
| microsoft | 75 |
| red hat | 60 |
| zephyrproject | 43 |
| mediatek | 32 |
| nvidia | 30 |
| academysoftwarefoundation | 18 |
| qualcomm | 16 |
| vim | 16 |
| watchguard | 16 |
| samsung mobile | 14 |
