CWE-501 · Other weaknesses
Trust Boundary Violation
22CVEs
SortMost likely exploited
22 CVEs with CWE-501 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-49050Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft · Python extension for Visual Studio Code · CVSS 8.8 · 2024-11-12 | 8.8 | 1.3% | 2024-11-12 |
| CVE-2020-4077Context isolation bypass via contextBridge in Electronelectron · electron · CVSS 7.7 · 2020-07-07 | 7.7 | 1.0% | 2020-07-07 |
| CVE-2020-15096Context isolation bypass via Promise in Electronelectron · electron · CVSS 6.8 · 2020-07-07 | 6.8 | 0.8% | 2020-07-07 |
| CVE-2026-27140Code execution vulnerability in SWIG code generation in cmd/goGo toolchain · cmd/go · CVSS 8.8 · 2026-04-08 | 8.8 | 0.7% | 2026-04-08 |
| CVE-2024-1725Kubevirt-csi: persistentvolume allows access to hcp's root nodeRed Hat · Red Hat OpenShift Container Platform 4.13 · CVSS 6.5 · 2024-03-07 | 6.5 | 0.6% | 2024-03-07 |
| CVE-2026-44091Creation of a new configuration by posting a malicious ID to MQTTPhoenix Contact · CHARX SEC-3150 · CVSS 9.1 · 2026-07-30 | 9.1 | 0.6% | 2026-07-30 |
| CVE-2025-48938Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Servercli · go-gh · CVSS 2.6 · 2025-05-30 | 2.6 | 0.6% | 2025-05-30 |
| CVE-2023-28597Improper trust boundary implementation for SMB in Zoom ClientsZoom Video Communications Inc · Zoom (for Android, iOS, Linux, macOS, and Windows) · CVSS 8.3 · 2023-03-27 | 8.3 | 0.5% | 2023-03-27 |
| CVE-2025-49714Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft · Python extension for Visual Studio Code · CVSS 7.8 · 2025-07-08 | 7.8 | 0.5% | 2025-07-08 |
| CVE-2026-121665Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft · Visual Studio Code · CVSS 8.8 · 2026-11-10 | 8.8 | 0.4% | 2026-11-10 |
| CVE-2019-0035Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumesJuniper Networks · Junos OS · CVSS 6.8 · 2019-04-10 | 6.8 | 0.4% | 2019-04-10 |
| CVE-2020-4076Context isolation bypass via leaked cross-context objects in Electronelectron · electron · CVSS 7.8 · 2020-07-07 | 7.8 | 0.4% | 2020-07-07 |
| CVE-2026-65902DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTagscure53 · DOMPurify · CVSS 6.1 · 2026-07-23 | 6.1 | 0.4% | 2026-07-23 |
| CVE-2022-20826A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat…Cisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 6.4 · 2022-11-10 | 6.4 | 0.4% | 2022-11-10 |
| CVE-2025-1118Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabledRedhat · grub2 · CVSS 4.4 · 2025-02-19 | 4.4 | 0.3% | 2025-02-19 |
| CVE-2026-33828Windows Device Health Attestation (DHA) Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.8 · 2026-06-09 | 7.8 | 0.3% | 2026-06-09 |
| CVE-2022-1799Incorrect signature verification on Google play-services-basement in Google Play SDKGoogle LLC · Google Play Services SDK · CVSS 5.7 · 2022-07-29 | 5.7 | 0.3% | 2022-07-29 |
| CVE-2025-14542Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpointNo vendor recorded · CVSS 7.5 · 2025-12-13 | 7.5 | 0.3% | 2025-12-13 |
| CVE-2023-0627Docker Desktop 4.11.x allows --no-windows-containers flag bypassDocker Inc. · Docker Desktop · CVSS 6.7 · 2023-09-25 | 6.7 | 0.3% | 2023-09-25 |
| CVE-2024-20265A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a…Cisco · Cisco IOS XE Software · CVSS 5.9 · 2024-03-27 | 5.9 | 0.2% | 2024-03-27 |
| CVE-2026-62146Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socketRed Hat · Red Hat OpenShift Container Platform 4.16 · CVSS 7.8 · 2026-09-30 | 7.8 | 0.2% | 2026-09-30 |
| CVE-2026-24153NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information discl…NVIDIA · Jetson Xavier Series, Jetson Orin Series and Jetson Thor · CVSS 5.2 · 2026-03-31 | 5.2 | 0.1% | 2026-03-31 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.