CWE-386 · Input Validation and Logic
Symbolic Name not Mapping to Correct Object
4CVEs
SortMost likely exploited
4 CVEs with CWE-386 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-3852GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115…Mozilla · Firefox · CVSS 7.5 · 2024-04-16 | 7.5 | 0.6% | 2024-04-16 |
| CVE-2026-94114Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoningApache Software Foundation · Apache Commons BCEL · CVSS 5.9 · 2026-10-06 | 5.9 | 0.3% | 2026-10-06 |
| CVE-2026-53081bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalarsLinux · Linux · CVSS 7.8 · 2026-06-24 | 7.8 | 0.2% | 2026-06-24 |
| CVE-2026-116486Objenesis before 3.6 Type Confusion via Class Name Instantiator Cacheeasymock · objenesis · CVSS 4.5 · 2026-10-26 | 4.5 | 0.1% | 2026-10-26 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.