Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-79
Weakness type CWE-79 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 4664 | 4502 | 31 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃▅▆▆█▆
2025-11 1 · 2025-12 25 · 2026-01 8 · 2026-02 9 · 2026-03 57 · 2026-04 30 · 2026-05 270 · 2026-06 639 · 2026-07 751 · 2026-08 760 · 2026-09 1119 · 2026-10 859
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2019-3929 | 9.8 | 99.9 | KEV | Crestron Multiple Products |
| CVE-2020-3580 | 6.1 | 99.7 | KEV | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Se… |
| CVE-2020-11023 | 6.9 | 99.7 | KEV | Potential XSS vulnerability in jQuery |
| CVE-2024-42009 | 9.3 | 99.7 | KEV | Roundcube Webmail |
| CVE-2023-34192 | 9.0 | 99.6 | KEV | Synacor Zimbra Collaboration Suite (ZCS) |
| CVE-2023-5631 | 6.1 | 99.5 | KEV | Stored XSS vulnerability in Roundcube |
| CVE-2024-37383 | 6.1 | 99.5 | KEV | Roundcube Webmail |
| CVE-2019-9978 | 6.1 | 99.4 | KEV | WordPress Social Warfare Plugin |
| CVE-2019-18426 | 8.2 | 99.3 | KEV | Meta Platforms WhatsApp |
| CVE-2023-43770 | 6.1 | 99.2 | KEV | Roundcube Webmail |
| CVE-2013-5223 | 5.4 | 98.9 | KEV | D-Link DSL-2760U |
| CVE-2023-37580 | 6.1 | 98.9 | KEV | Synacor Zimbra Collaboration Suite (ZCS) |
| CVE-2021-26829 | 5.4 | 98.8 | KEV | OpenPLC ScadaBR |
| CVE-2022-39197 | 6.1 | 98.8 | KEV | Fortra Cobalt Strike |
| CVE-2024-43573 | 6.5 | 98.8 | KEV | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2020-35730 | 6.1 | 98.3 | KEV | Roundcube Roundcube Webmail |
| CVE-2024-11182 | 5.3 | 98.3 | KEV | Stored XSS vulnerability in MDaemon Email Server |
| CVE-2018-6882 | 6.1 | 98.2 | KEV | Synacor Zimbra Collaboration Suite (ZCS) |
| CVE-2018-19953 | 6.1 | 98.1 | KEV | QNAP Network Attached Storage (NAS) |
| CVE-2025-68461 | 7.2 | 98.0 | KEV | Roundcube Webmail |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| adobe | 274 |
| microsoft | 121 |
| ibm | 56 |
| sourcecodester | 56 |
| siyuan-note | 39 |
| frappe | 36 |
| misp | 35 |
| 32 | |
| wwbn | 32 |
| apache | 31 |
| code-projects | 30 |
| concrete cms | 25 |
| drupal | 25 |
| getgrav | 21 |
| jetbrains | 20 |
