CWE-911 · weakness in Memory Corruption
Improper Update of Reference Count
18 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.
- An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote client…
- This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication…
- Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash
- Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel version…
- Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls
- Jail reference count underflow
- Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been c…
- A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may all…
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers
- Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
- Grub2: fs/hfs+: refcount can be decremented twice
- iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
- aufs: improperly managed inode reference counts in the vfsub_dentry_open() method
- Mullvad wireguard.sys IOCTL AdapterState reference count
- GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence
- FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.