CWE-353 · Cryptography
Missing Support for Integrity Check
51CVEs
SortMost likely exploited
51 CVEs with CWE-353 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-28545Acrobat Reader DC Missing Support for Integrity CheckAdobe · Acrobat Reader · CVSS 8.1 · 2021-04-01 | 8.1 | 2.5% | 2021-04-01 |
| CVE-2021-28546Acrobat Reader DC Missing Support for Integrity CheckAdobe · Acrobat Reader · CVSS 6.5 · 2021-04-01 | 6.5 | 1.5% | 2021-04-01 |
| CVE-2019-10943A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMAT…Siemens · SIMATIC Drive Controller family · 2019-08-13 | – | 1.0% | 2019-08-13 |
| CVE-2020-10124NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host computer, which could allow an attacker…NCR · SelfServ ATM · 2020-08-21 | – | 0.7% | 2020-08-21 |
| CVE-2020-7878An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is due to missing support for integrity c…4NB · VideoOffice · 2021-12-28 | – | 0.7% | 2021-12-28 |
| CVE-2020-7808RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerabilityRAONWIZ Inc · K Upload · CVSS 8.7 · 2020-05-21 | 8.7 | 0.7% | 2020-05-21 |
| CVE-2023-29290Adobe Commerce Guest Cart Shipping Address Overwrite IDORAdobe · Magento Commerce · CVSS 5.3 · 2023-06-15 | 5.3 | 0.6% | 2023-06-15 |
| CVE-2021-26608handysoft groupware arbitrary file download and execution vulnerabilityhandysoft · HShell.dll · CVSS 8.8 · 2021-09-09 | 8.8 | 0.6% | 2021-09-09 |
| CVE-2019-19160Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp).Cabsoftware · Reportexpress ProPlus · CVSS 5.7 · 2020-06-29 | 5.7 | 0.6% | 2020-06-29 |
| CVE-2019-11480Ubuntu kernel snap build process could use unauthenticated sourcesCanonical · pc-kernel · CVSS 8.4 · 2020-04-14 | 8.4 | 0.5% | 2020-04-14 |
| CVE-2020-10266RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robotUniversal Robots · URx · CVSS 8.8 · 2020-04-06 | 8.8 | 0.5% | 2020-04-06 |
| CVE-2021-26610godomall5 remote code execution vulnerabilityNHN COMMERCE · godomall5 Std, godomall5 Pro · CVSS 7.2 · 2021-10-27 | 7.2 | 0.5% | 2021-10-27 |
| CVE-2020-7810HandySoft ActiveX File Download and Execution VulnerabilityHandysoft, Inc. · hslogin2.dll · CVSS 8.8 · 2020-08-07 | 8.8 | 0.4% | 2020-08-07 |
| CVE-2019-12804Hunesion i-oneNet Missing Support for Integrity Check vulnerabilityHunesion · i-oneNet · CVSS 7.8 · 2019-07-10 | 7.8 | 0.4% | 2019-07-10 |
| CVE-2026-58224Samba: ctdb fails to do integrity checking of received packetsRed Hat · Red Hat Ceph Storage 9.2 · CVSS 6.5 · 2026-08-14 | 6.5 | 0.3% | 2026-08-14 |
| CVE-2026-79801Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client AgentHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM) · CVSS 9.8 · 2026-10-06 | 9.8 | 0.3% | 2026-10-06 |
| CVE-2026-76751Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code ExecutionHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM) · CVSS 9.8 · 2026-10-06 | 9.8 | 0.3% | 2026-10-06 |
| CVE-2025-10010Integrity Validation Bypass in CryptoPro Secure Disk for BitLockerCPSD IT SERVICES GMBH · CryptoPro Secure Disk for BitLocker · CVSS 6.8 · 2026-02-24 | 6.8 | 0.3% | 2026-02-24 |
| CVE-2025-48811Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 6.7 · 2025-07-08 | 6.7 | 0.3% | 2025-07-08 |
| CVE-2025-48803Windows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 6.7 · 2025-07-08 | 6.7 | 0.3% | 2025-07-08 |
| CVE-2022-24404Ciphertext Malleability in TETRAETSI · TETRA Standard · CVSS 5.9 · 2023-10-19 | 5.9 | 0.3% | 2023-10-19 |
| CVE-2023-28865Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories (e.g., ensur…Dieboldnixdorf · Vynamic Security Suite · CVSS 6.6 · 2024-08-08 | 6.6 | 0.3% | 2024-08-08 |
| CVE-2026-76853Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgiNetcore · NR268 · CVSS 8.1 · 2026-09-15 | 8.1 | 0.3% | 2026-09-15 |
| CVE-2024-46917Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recov…Dieboldnixdorf · Vynamic Security Suite · CVSS 8.1 · 2025-08-29 | 8.1 | 0.2% | 2025-08-29 |
| CVE-2026-33261Null pointer accces in aggressive NSEC(3) cachePowerDNS · Recursor · CVSS 5.9 · 2026-04-22 | 5.9 | 0.2% | 2026-04-22 |
| CVE-2025-15364Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePasswordcodename065 · Download Manager · CVSS 7.3 · 2026-01-06 | 7.3 | 0.2% | 2026-01-06 |
| CVE-2020-7807DLL Hijacking Vulnerabilities During Installation of LG Electronics SoftwareLG Electronics · (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) · CVSS 5.6 · 2020-09-14 | 5.6 | 0.2% | 2020-09-14 |
| CVE-2026-49450Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherNamelaurent22 · joplin · CVSS 7.1 · 2026-09-21 | 7.1 | 0.2% | 2026-09-21 |
| CVE-2024-27817The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventur…Apple · iOS and iPadOS · CVSS 7.8 · 2024-06-10 | 7.8 | 0.2% | 2024-06-10 |
| CVE-2026-28854The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.Apple · macOS · CVSS 7.5 · 2026-10-20 | 7.5 | 0.2% | 2026-10-20 |
| CVE-2021-38396Missing Support Integrity Check for Boston Scientific Zoom LatitudeBoston Scientific · ZOOM LATITUDE · CVSS 6.5 · 2021-10-04 | 6.5 | 0.2% | 2021-10-04 |
| CVE-2026-3856IBM Db2 Recovery Expert Missing Integrity CheckIBM · Db2 Recovery Expert · CVSS 5.3 · 2026-03-17 | 5.3 | 0.2% | 2026-03-17 |
| CVE-2020-9062Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host compu…Diebold Nixdorf · ProCash 2100xe USB ATM · 2020-08-21 | – | 0.2% | 2020-08-21 |
| CVE-2026-48995pnpm: Tarball hash of GitHub git dependencies is not stored in lockfilepnpm · pnpm · CVSS 4.8 · 2026-06-25 | 4.8 | 0.2% | 2026-06-25 |
| CVE-2023-32475Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrar…Dell · CPG BIOS · CVSS 7.6 · 2024-06-07 | 7.6 | 0.2% | 2024-06-07 |
| CVE-2026-21437eopkg vulnerable to package file list integrity bypassgetsolus · eopkg · CVSS 2 · 2026-01-01 | 2.0 | 0.2% | 2026-01-01 |
| CVE-2026-84533A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privil…Apple · iOS and iPadOS · CVSS 5.3 · 2026-09-14 | 5.3 | 0.2% | 2026-09-14 |
| CVE-2026-89179Howyar｜WeenyGenius - Missing Support for Integrity CheckHowyar · WeenyGenius · CVSS 4.3 · 2026-09-11 | 4.3 | 0.2% | 2026-09-11 |
| CVE-2026-12705Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update ToolABB · KNX Update Tool (ABB) · CVSS 6.4 · 2026-07-17 | 6.4 | 0.2% | 2026-07-17 |
| CVE-2022-2793Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data…Emerson Electric · Proficy Machine Edition · CVSS 5.9 · 2022-08-19 | 5.9 | 0.1% | 2022-08-19 |
| CVE-2026-77157ast-cli: Auto-update downloads are not verified against a checksum before executionCheckmarx · github.com/checkmarx/ast-cli · CVSS 6.4 · 2026-10-22 | 6.4 | 0.1% | 2026-10-22 |
| CVE-2026-17583Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity CheckThermo Fisher · Applied Biosystems 3500/3500xL Series Data Collection Software · CVSS 8.4 · 2026-08-05 | 8.4 | 0.1% | 2026-08-05 |
| CVE-2026-42428OpenClaw < 2026.4.8 - Missing Integrity Verification in Package DownloadsOpenClaw · OpenClaw · CVSS 7.1 · 2026-04-28 | 7.1 | 0.1% | 2026-04-28 |
| CVE-2025-32890An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechani…Gotenna · Gotenna · CVSS 5.3 · 2025-05-01 | 5.3 | 0.1% | 2025-05-01 |
| CVE-2025-48500BIG-IP APM VPN web client for macOS vulnerabilityF5 · BIG-IP Edge Client · CVSS 7.3 · 2025-08-13 | 7.3 | 0.1% | 2025-08-13 |
| CVE-2026-81049Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit…Dell · ThinOS 10 · CVSS 4.4 · 2026-09-10 | 4.4 | 0.1% | 2026-09-10 |
| CVE-2026-7574Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before UseAnthropic · Claude Desktop Cowork · CVSS 8.7 · 2026-06-23 | 8.7 | 0.1% | 2026-06-23 |
| CVE-2026-95723Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) ClientHewlett Packard Enterprise (HPE) · Virtual Intranet Access (VIA) · CVSS 8.4 · 2026-11-03 | 8.4 | 0.1% | 2026-11-03 |
| CVE-2025-32882An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional integrity checking mech…Gotenna · Gotenna · CVSS 5.3 · 2025-05-01 | 5.3 | 0.1% | 2025-05-01 |
| CVE-2024-43108goTenna Pro ATAK Plugin Missing Support for Integrity CheckgoTenna · Pro ATAK Plugin · CVSS 5.3 · 2024-09-26 | 5.3 | 0.1% | 2024-09-26 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.