CWE-232 · Input Validation and Logic
Improper Handling of Undefined Values
11CVEs
SortMost likely exploited
11 CVEs with CWE-232 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-40775DNS message with invalid TSIG causes an assertion failureISC · BIND 9 · CVSS 7.5 · 2025-05-21 | 7.5 | 15% | 2025-05-21 |
| CVE-2023-2968Undefined variable usage in npm package "proxy" leads to remote denial of serviceProxy Project · Proxy · CVSS 7.5 · 2023-05-30 | 7.5 | 1.5% | 2023-05-30 |
| CVE-2021-34705Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass VulnerabilityCisco · Cisco IOS · CVSS 5.3 · 2021-09-23 | 5.3 | 1.0% | 2021-09-23 |
| CVE-2022-22213Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP updateJuniper Networks · Junos OS · CVSS 5.9 · 2022-07-20 | 5.9 | 0.7% | 2022-07-20 |
| CVE-2023-39914BER/CER/DER decoder panics on invalid inputNLnet Labs · bcder · CVSS 7.5 · 2023-09-13 | 7.5 | 0.7% | 2023-09-13 |
| CVE-2023-39915Crashes on parsing certain invalid RPKI objectsNLnet Labs · Routinator · CVSS 7.5 · 2023-09-13 | 7.5 | 0.6% | 2023-09-13 |
| CVE-2025-20192A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (…Cisco · Cisco IOS XE Software · CVSS 7.7 · 2025-05-07 | 7.7 | 0.5% | 2025-05-07 |
| CVE-2023-36848Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packetJuniper Networks · Junos OS · CVSS 6.5 · 2023-07-14 | 6.5 | 0.3% | 2023-07-14 |
| CVE-2021-3718A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.Lenovo · ThinkPad BIOS · CVSS 4.3 · 2021-11-12 | 4.3 | 0.2% | 2021-11-12 |
| CVE-2025-20314A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected d…Cisco · Cisco IOS XE Software · CVSS 6.7 · 2025-09-24 | 6.7 | 0.2% | 2025-09-24 |
| CVE-2026-92088Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privil…upKeeper Solutions · upKeeper Instant Privilege Access · CVSS 8.6 · 2026-10-13 | 8.6 | 0.1% | 2026-10-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.