Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-835
Weakness type CWE-835 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 241 | 196 | 1 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▂▃▄█▅▇▇
2025-11 0 · 2025-12 0 · 2026-01 0 · 2026-02 0 · 2026-03 8 · 2026-04 5 · 2026-05 11 · 2026-06 22 · 2026-07 46 · 2026-08 26 · 2026-09 38 · 2026-10 40
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-20353 | 8.6 | 99.4 | KEV | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) |
| CVE-2020-13935 | 7.5 | 99.7 | — | — |
| CVE-2014-0050 | 7.5 | 99.7 | — | — |
| CVE-2020-36227 | 7.5 | 99.6 | — | — |
| CVE-2022-0778 | 7.5 | 99.5 | — | Infinite loop in BN_mod_sqrt() reachable when parsing certificates |
| CVE-2021-3737 | 7.5 | 96.3 | — | — |
| CVE-2022-23437 | 6.5 | 96.0 | — | Infinite loop within Apache XercesJ xml parser |
| CVE-2017-9233 | 7.5 | 95.1 | — | — |
| CVE-2020-7595 | 7.5 | 94.6 | — | — |
| CVE-2021-41079 | 7.5 | 94.2 | — | Apache Tomcat DoS with unexpected TLS packet |
| CVE-2021-37714 | 7.5 | 93.8 | — | Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw u… |
| CVE-2017-16932 | 7.5 | 93.7 | — | — |
| CVE-2021-39140 | 6.3 | 93.2 | — | XStream can cause a Denial of Service |
| CVE-2018-14567 | 6.5 | 91.1 | — | — |
| CVE-2021-46828 | 7.5 | 88.0 | — | — |
| CVE-2019-20907 | 7.5 | 87.1 | — | — |
| CVE-2022-27781 | 7.5 | 86.7 | — | — |
| CVE-2026-33116 | 7.5 | 84.1 | — | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
| CVE-2026-42899 | 7.5 | 84.1 | — | ASP.NET Core Denial of Service Vulnerability |
| CVE-2024-43512 | 6.5 | 81.5 | — | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| linux | 37 |
| red hat | 12 |
| apache | 10 |
| imagemagick | 7 |
| microsoft | 7 |
| ibm | 6 |
| zephyrproject | 6 |
| py-pdf | 5 |
| ffmpeg | 4 |
| freerdp | 3 |
| image-size | 3 |
| legion of the bouncy castle | 3 |
| open-webui | 3 |
| wireshark foundation | 3 |
| cisco | 2 |
