Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-908
Weakness type CWE-908 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 329 | 223 | 4 |
Monthly trend
▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▃▂▂▂▂▂▂▁▁▂▁▁▁▁▂▂▂▁▁▁▁▁▁▂▃▄▆▇█▇
2025-11 0 · 2025-12 1 · 2026-01 3 · 2026-02 0 · 2026-03 2 · 2026-04 4 · 2026-05 15 · 2026-06 20 · 2026-07 37 · 2026-08 43 · 2026-09 52 · 2026-10 47
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2025-5777 | 9.3 | 100.0 | KEV | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory o… |
| CVE-2026-85880 | 7.8 | 89.4 | KEV | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
| CVE-2024-50302 | 5.5 | 56.1 | KEV | HID: core: zero-initialize the report buffer |
| CVE-2024-29745 | 5.5 | 40.5 | KEV | Android Pixel |
| CVE-2024-12085 | 7.5 | 95.1 | — | Rsync: info leak via uninitialized stack contents |
| CVE-2024-43502 | 7.1 | 93.5 | — | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2021-22925 | 5.3 | 92.6 | — | — |
| CVE-2024-38257 | 7.5 | 91.3 | — | Microsoft AllJoyn API Information Disclosure Vulnerability |
| CVE-2019-16866 | 7.5 | 89.0 | — | — |
| CVE-2018-7166 | 7.5 | 86.2 | — | — |
| CVE-2025-27474 | 6.5 | 78.3 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2024-43458 | 7.7 | 77.9 | — | Windows Networking Information Disclosure Vulnerability |
| CVE-2023-36913 | 7.5 | 76.7 | — | Microsoft Message Queuing Information Disclosure Vulnerability |
| CVE-2024-38260 | 8.8 | 75.7 | — | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
| CVE-2024-47685 | 9.1 | 71.4 | — | netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() |
| CVE-2026-3497 | 6.9 | 70.0 | — | — |
| CVE-2020-35494 | 6.1 | 65.8 | — | — |
| CVE-2026-72989 | 7.5 | 63.0 | — | Windows Failover Cluster Information Disclosure Vulnerability |
| CVE-2026-85322 | 7.5 | 63.0 | — | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
| CVE-2026-57982 | 6.5 | 62.0 | — | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
