CWE-755

582 vulnerabilities with CWE-755

CVE-2026-28542 HIGH

System Service Framework - Auth Bypass

CVSS 7.3

CVE-2026-27809 CRITICAL

psd-tools < 1.12.2 - Denial of Service via Malformed RLE-Compressed Image Data

CVSS 9.1

CVE-2026-27195 HIGH

Wasmtime 39.0.0-40.0.3 - Denial of Service via Async Component Function Call Panic

CVSS 7.5

CVE-2026-27586 CRITICAL

Caddy < 2.11.1 - mTLS Authentication Bypass via Missing or Malformed CA Certificate

CVSS 9.1

CVE-2026-25957 MEDIUM

Cubejs-backend Server-core < 1.4.2 - Improper Exception Handling

CVSS 6.5

CVE-2026-23762 MEDIUM

VB-Audio Voicemeeter <1.1.1.9-3.1.1.9 - Memory Corruption

CVE-2026-21906 HIGH

Juniper Junos < 21.4 - Improper Exception Handling

CVSS 7.5

CVE-2026-0203 MEDIUM

Juniper Junos Multiple Versions - Unauthenticated DoS via Malformed ICMPv4 Packet

CVSS 6.5

CVE-2025-69255 MEDIUM

RustFS 1.0.0-alpha.13-1.0.0-alpha.77 - Denial of Service via Malformed gRPC GetMetrics Request

CVSS 4.0

CVE-2025-68274 HIGH

emiago sipgo 0.3.0-1.0.0-alpha-1 - Denial of Service via NewResponseFromRequest Nil Pointer Dereference

CVSS 7.5

CVE-2025-66622 HIGH

matrix-sdk-base < 0.16.0 - Denial of Service via Custom m.room.join_rules Serialization

CVSS 7.5

CVE-2025-62711 LOW

Wasmtime 38.0.0-38.0.2 - Denial of Service via Crafted Component-Model Trampoline

CVSS 3.1

CVE-2025-53702 MEDIUM

Vilar VS-IPC1002 Firmware - Unauthenticated Denial of Service via /cgi-bin/action Endpoint

CVSS 6.5

CVE-2025-9437 HIGH

Studio 5000 Logix Designer AOP - DoS

CVE-2025-59530 HIGH

quic-go < 0.49.0, 0.54.1 - Unauthenticated Denial of Service via Premature HANDSHAKE_DONE Frame

CVSS 7.5

CVE-2025-34193 CRITICAL

Vasion Print Virtual Appliance Host <25.1.102 & Application <25.1.1413 - RCE via Insecure Windows Components

CVSS 9.8

CVE-2025-10156 CRITICAL

mmaitre314 picklescan < 0.0.31 - Security Scan Bypass via Malformed ZIP CRC

CVSS 9.8

CVE-2025-8008 MEDIUM

Rockwell Automation 1756-EN2TR/EN4TR/EN4TRXT Series < 7.001 - Denial of Service via Crafted Forward Close Messages

CVSS 6.5

CVE-2025-58047 HIGH

Volto < 16.34.0, 17.0.0-17.22.0, 18.0.0-18.23.0, 19.0.0-alpha.1-19.0.0-alpha.3 - DoS via Specific URL

CVSS 7.5

CVE-2025-54634 HIGH

HarmonyOS - Denial of Service via Huge Page Separation

CVSS 8.0

CVE-2025-27465 MEDIUM

Xen >= 4.9.0 - Denial of Service via Exception Handling in Replayed Instruction Emulation

CVSS 4.3

CVE-2025-52948 MEDIUM

Junos OS DoS via BPF Interface Cloning Race Condition

CVSS 5.9

CVE-2025-52947 MEDIUM

Juniper Junos < 21.2R3-S9 - Denial of Service via Interface Flapping on ACX Series

CVSS 6.5

CVE-2025-41222 MEDIUM

Siemens RUGGEDCOM - Denial of Service via Malformed TLS Handshake Message

CVSS 5.3

CVE-2025-46733 HIGH

OP-TEE optee_os 4.5.0 - Denial of Service via Malicious tee-supplicant Return Codes

CVSS 7.9