Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-825
Weakness type CWE-825 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 53 | 46 | 0 |
Monthly trend
▂▁▁▁▁▂▁▁▁▁▁▄█▂▂▂▂
2025-11 4 · 2025-12 0 · 2026-01 0 · 2026-02 1 · 2026-03 0 · 2026-04 1 · 2026-05 9 · 2026-06 21 · 2026-07 4 · 2026-08 3 · 2026-09 3 · 2026-10 4
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-45447 | 8.8 | 90.4 | — | Heap Use-After-Free in the PKCS7_verify() Function |
| CVE-2026-6722 | 9.5 | 69.9 | — | Use-After-Free in SOAP using Apache map |
| CVE-2025-49794 | 9.1 | 56.9 | — | Libxml: heap use after free (uaf) leads to denial of service (dos) |
| CVE-2026-6100 | 9.1 | 54.4 | — | Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after r… |
| CVE-2026-44422 | 8.8 | 50.4 | — | FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion |
| CVE-2025-49795 | 7.5 | 47.2 | — | Libxml: null pointer dereference leads to denial of service (dos) |
| CVE-2026-58592 | 8.9 | 44.7 | — | Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssem… |
| CVE-2026-52924 | 9.8 | 43.3 | — | sctp: purge outqueue on stale COOKIE-ECHO handling |
| CVE-2026-12328 | 8.1 | 39.7 | — | Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140… |
| CVE-2026-8854 | 7.5 | 38.4 | — | IBM HTTP Server is affected by multiple vulnerabilities |
| CVE-2026-57435 | 1.7 | 38.5 | — | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::A… |
| CVE-2026-46125 | 8.8 | 37.0 | — | wifi: mac80211: remove station if connection prep fails |
| CVE-2026-65970 | 5.3 | 35.2 | — | OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_nativ… |
| CVE-2026-77220 | 7.1 | 35.0 | — | PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting |
| CVE-2026-46523 | 6.2 | 34.5 | — | ImageMagick: Use-After-Free in MSL decoder. |
| CVE-2026-78123 | 5.9 | 34.0 | — | — |
| CVE-2026-53006 | 9.8 | 32.1 | — | ipv6: fix possible UAF in icmpv6_rcv() |
| CVE-2026-12291 | 8.8 | 30.6 | — | Use-after-free in the Networking: HTTP component |
| CVE-2026-46243 | 7.1 | 30.1 | — | smb: client: reject userspace cifs.spnego descriptions |
| CVE-2026-12326 | 8.1 | 28.5 | — | Memory safety bugs fixed in Firefox 152 and Thunderbird 152 |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 19 |
| red hat | 13 |
| gnu | 4 |
| mozilla | 4 |
| wireshark foundation | 2 |
| zephyrproject | 2 |
| academysoftwarefoundation | 1 |
| corewcf | 1 |
| freerdp | 1 |
| gnome | 1 |
| ibm | 1 |
| imagemagick | 1 |
| ladybirdbrowser | 1 |
| michaelrsweet | 1 |
| openssl | 1 |
