CWE-707 · Input Validation and Logic
Improper Neutralization
25CVEs
SortMost likely exploited
25 CVEs with CWE-707 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-43572In CISA KEVExploitedMicrosoft Management Console Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2024-10-08 | 7.8 | 67% | 2024-10-08 |
| CVE-2025-26633In CISA KEVExploitedMicrosoft Management Console Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7 · 2025-03-11 | 7.0 | 30% | 2025-03-11 |
| CVE-2020-11080Denial of service in nghttp2nghttp2 · nghttp2 · CVSS 3.7 · 2020-06-03 | 3.7 | 5.3% | 2020-06-03 |
| CVE-2026-76443Cisco Secure Email Gateway Security Hardening ReleaseCisco · Cisco Secure Email · CVSS 9.8 · 2026-09-14 | 9.8 | 2.4% | 2026-09-14 |
| CVE-2019-10052An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust enviro…Suricata-Ids · Suricata · 2019-08-28 | – | 2.1% | 2019-08-28 |
| CVE-2020-11026Specially crafted filenames in WordPress leading to XSSWordPress · WordPress · CVSS 8.7 · 2020-04-30 | 8.7 | 2.1% | 2020-04-30 |
| CVE-2020-11030Cross-site scripting (XSS) in Search block in WordPressWordPress · WordPress · CVSS 6.4 · 2020-04-30 | 6.4 | 1.4% | 2020-04-30 |
| CVE-2018-3918An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays a…Samsung · Samsung · CVSS 6.5 · 2018-08-27 | 6.5 | 1.0% | 2018-08-27 |
| CVE-2022-23004Algorithm incorrectly returning error and Invalid unreduced value written to output bufferWestern Digital · Sweet B Library · CVSS 5.3 · 2022-07-29 | 5.3 | 0.7% | 2022-07-29 |
| CVE-2021-27493Philips Vue PACSPhilips · Vue PACS · CVSS 6.1 · 2022-04-01 | 6.1 | 0.7% | 2022-04-01 |
| CVE-2026-4249Denial of Service via Malicious JSON Payloads in Throttling Events in Multiple WSO2 Products Causing Persistent Service DisruptionWSO2 · WSO2 Universal Gateway · CVSS 8.6 · 2026-07-06 | 8.6 | 0.6% | 2026-07-06 |
| CVE-2023-6123Improper Neutralization vulnerability affects OpenText ALM Octane.OpenText · ALM Octane. · CVSS 7.5 · 2024-02-15 | 7.5 | 0.5% | 2024-02-15 |
| CVE-2026-20278Cisco IOS XR Software Security Hardening Release: September 2026Cisco · Cisco IOS XR Software · CVSS 8.8 · 2026-09-02 | 8.8 | 0.5% | 2026-09-02 |
| CVE-2026-20330Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralizati…Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 9.9 · 2026-09-16 | 9.9 | 0.5% | 2026-09-16 |
| CVE-2026-76284Improper Neutralization in Splunk EnterpriseSplunk · Splunk Enterprise · CVSS 9.8 · 2026-10-07 | 9.8 | 0.5% | 2026-10-07 |
| CVE-2026-76302Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise · CVSS 9.9 · 2026-10-21 | 9.9 | 0.4% | 2026-10-21 |
| CVE-2026-76526Improper Neutralization in Splunk SOARSplunk · Splunk SOAR · CVSS 8.8 · 2026-10-21 | 8.8 | 0.4% | 2026-10-21 |
| CVE-2026-76453Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization VulnerabilitiesCisco · Cisco NX-OS Software · CVSS 8.8 · 2026-10-07 | 8.8 | 0.4% | 2026-10-07 |
| CVE-2026-76499Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization VulnerabilitiesCisco · Cisco Application Policy Infrastructure Controller (APIC) · CVSS 9.8 · 2026-10-07 | 9.8 | 0.3% | 2026-10-07 |
| CVE-2025-66545Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash binnextcloud · security-advisories · CVSS 3.5 · 2025-12-05 | 3.5 | 0.3% | 2025-12-05 |
| CVE-2025-24921Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable inf…Edge Orchestrator software · CVSS 6.6 · 2025-08-12 | 6.6 | 0.2% | 2025-08-12 |
| CVE-2023-46689Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access.Intel · Intel(R) Power Gadget software for macOS · CVSS 8.8 · 2024-05-16 | 8.8 | 0.2% | 2024-05-16 |
| CVE-2023-42773Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.Intel · Intel(R) Power Gadget software for Windows · CVSS 8.8 · 2024-05-16 | 8.8 | 0.2% | 2024-05-16 |
| CVE-2026-60139Improper neutralization in the MigTD SPDM transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary…Intel(R) TDX Migration Trust Domain (MigTD) · CVSS 6 · 2026-11-10 | 6.0 | 0.2% | 2026-11-10 |
| CVE-2025-27712Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwa…Intel(R) Neural Compressor software · CVSS 5.7 · 2025-11-11 | 5.7 | 0.1% | 2025-11-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.