CWE-686 · Input Validation and Logic
Function Call With Incorrect Argument Type
7CVEs
SortMost likely exploited
7 CVEs with CWE-686 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-5868Postgresql: memory disclosure in aggregate function callsRed Hat · Red Hat Advanced Cluster Security 4.2 · CVSS 4.3 · 2023-12-10 | 4.3 | 2.8% | 2023-12-10 |
| CVE-2026-112902Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagspython-pillow · Pillow · CVSS 8.3 · 2026-11-05 | 8.3 | 0.6% | 2026-11-05 |
| CVE-2025-14330JIT miscompilation in the JavaScript Engine: JIT componentMozilla · Firefox · CVSS 9.8 · 2025-12-09 | 9.8 | 0.5% | 2025-12-09 |
| CVE-2026-8389JIT miscompilation in the JavaScript Engine: JIT componentMozilla · Firefox · CVSS 8.8 · 2026-05-12 | 8.8 | 0.4% | 2026-05-12 |
| CVE-2026-33783Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashesJuniper Networks · Junos OS Evolved · CVSS 6.5 · 2026-04-09 | 6.5 | 0.3% | 2026-04-09 |
| CVE-2024-32632Printf arg type mismatch in ATCMDASR · Falcon/Crane · CVSS 6.6 · 2024-04-16 | 6.6 | 0.2% | 2024-04-16 |
| CVE-2026-78422zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UIDz-galaxy · zbus_polkit · CVSS 7.3 · 2026-08-31 | 7.3 | 0.1% | 2026-08-31 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.