Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-843
Weakness type CWE-843 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 313 | 251 | 42 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▅▆▅█▅
2025-11 1 · 2025-12 0 · 2026-01 3 · 2026-02 2 · 2026-03 3 · 2026-04 7 · 2026-05 14 · 2026-06 34 · 2026-07 44 · 2026-08 41 · 2026-09 65 · 2026-10 38
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2011-0611 | 8.8 | 99.9 | KEV | Adobe Flash Player |
| CVE-2012-0507 | 9.8 | 99.9 | KEV | Oracle Java SE |
| CVE-2017-8291 | 7.8 | 99.9 | KEV | Artifex Ghostscript |
| CVE-2021-21224 | 8.8 | 99.7 | KEV | Google Chromium V8 |
| CVE-2019-0752 | 7.5 | 99.6 | KEV | Microsoft Internet Explorer |
| CVE-2017-0037 | 8.1 | 99.6 | KEV | Microsoft Edge and Internet Explorer |
| CVE-2016-7201 | 8.8 | 99.6 | KEV | Microsoft Edge |
| CVE-2020-6418 | 8.8 | 99.6 | KEV | Google Chromium V8 |
| CVE-2018-8298 | 7.5 | 99.5 | KEV | ChakraCore ChakraCore scripting engine |
| CVE-2021-30551 | 8.8 | 99.2 | KEV | Google Chromium V8 |
| CVE-2026-85046 | 8.8 | 98.9 | KEV | — |
| CVE-2020-16009 | 8.8 | 98.9 | KEV | Google Chromium V8 |
| CVE-2019-17026 | 8.8 | 98.8 | KEV | Mozilla Firefox and Thunderbird |
| CVE-2024-38178 | 7.5 | 98.7 | KEV | Scripting Engine Memory Corruption Vulnerability |
| CVE-2023-4762 | 8.8 | 98.7 | KEV | Google Chromium V8 |
| CVE-2023-2033 | 8.8 | 98.6 | KEV | Google Chromium V8 |
| CVE-2023-3079 | 8.8 | 98.5 | KEV | Google Chromium V8 |
| CVE-2019-11707 | 8.8 | 98.5 | KEV | Mozilla Firefox and Thunderbird |
| CVE-2017-5070 | 8.8 | 98.3 | KEV | Google Chromium V8 |
| CVE-2025-30397 | 7.5 | 98.0 | KEV | Scripting Engine Memory Corruption Vulnerability |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| 85 | |
| microsoft | 81 |
| apple | 18 |
| mozilla | 15 |
| red hat | 7 |
| linux | 5 |
| handlebars-lang | 4 |
| mongodb | 4 |
| nvidia | 4 |
| adobe | 3 |
| oisf | 3 |
| zephyrproject | 3 |
| apache | 2 |
| cedar-policy | 2 |
| ibm | 2 |
