boxscore/security
CWE · referenceWeaknesses · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CWE-833

Weakness type CWE-833 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.

Totals

Totals
CVEs all-timeCVEs YTDKEV all-time
13100

Monthly trend

▃▁▁▁▁▁▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▃▁▃▅█

2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 0 · 2026-04 0 · 2026-05 2 · 2026-06 1 · 2026-07 0 · 2026-08 1 · 2026-09 2 · 2026-10 4

Top CVEs

Ranked by KEV → EPSS → CVSS (§6)
CVECVSSEPSS %ileKEVTitle
CVE-2026-1035587.558.4—Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
CVE-2026-701867.557.3—ASP.NET Core Denial of Service Vulnerability
CVE-2026-445797.554.5—Next.js: Denial of Service via connection exhaustion in applications using Cache Compon…
CVE-2026-1057926.551.9—Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager
CVE-2024-84475.951.5—Narayana: deadlock via multiple join requests sent to lra coordinator
CVE-2026-463527.539.3—Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock
CVE-2026-706167.125.5—boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint
CVE-2022-42695.59.3——
CVE-2026-106475.39.3—Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure
CVE-2026-777986.59.0—Velociraptor Authenticated Denial of Service
CVE-2024-06395.56.7—Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos
CVE-2026-1053906.91.4——
CVE-2026-473345.50.9—Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling

Most-affected vendors

Vendors with the most CVEs of this type
VendorCVEs
microsoft3
red hat2
boringproxy1
canonical1
oisf1
openvpn1
rapid71
vercel1
zephyrproject1