CWE-372 · Other weaknesses
Incomplete Internal State Distinction
11CVEs
SortMost likely exploited
11 CVEs with CWE-372 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-25735Validating Admission Webhook does not observe some previous fieldsKubernetes · Kubernetes · CVSS 6.5 · 2021-09-06 | 6.5 | 5.4% | 2021-09-06 |
| CVE-2020-27222In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal sta…The Eclipse Foundation · Eclipse Californium · 2021-02-03 | – | 0.9% | 2021-02-03 |
| CVE-2024-22590The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, includ…No vendor recorded · CVSS 9.1 · 2024-05-28 | 9.1 | 0.6% | 2024-05-28 |
| CVE-2023-4012Incomplete Internal State Distinction in ntpsecNTPsec · ntpsec · CVSS 7.5 · 2023-08-07 | 7.5 | 0.4% | 2023-08-07 |
| CVE-2023-54406Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scriptsfrappe · frappe · CVSS 4.9 · 2026-10-12 | 4.9 | 0.3% | 2026-10-12 |
| CVE-2026-41388OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation HandlingOpenClaw · OpenClaw · CVSS 6.5 · 2026-04-28 | 6.5 | 0.3% | 2026-04-28 |
| CVE-2023-36834Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSJuniper Networks · Junos OS · CVSS 6.5 · 2023-07-14 | 6.5 | 0.3% | 2023-07-14 |
| CVE-2026-41340OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom MigrationOpenClaw · OpenClaw · CVSS 6.5 · 2026-04-23 | 6.5 | 0.3% | 2026-04-23 |
| CVE-2026-41300OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote OnboardingOpenClaw · OpenClaw · CVSS 6.5 · 2026-04-20 | 6.5 | 0.3% | 2026-04-20 |
| CVE-2026-119140Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yieldbytecodealliance · wasmtime · CVSS 4.8 · 2026-10-29 | 4.8 | 0.2% | 2026-10-29 |
| CVE-2026-57893Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privil…Intel(R) TDX Migration Trust Domain (MigTD) · CVSS 6.8 · 2026-11-10 | 6.8 | 0.2% | 2026-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.