CWE-226: CWE-226

Total CVEs

Critical

High

6.1

Avg CVSS

Yearly Trend

2026

2025

2024

2023

Top Affected Vendors

1 Ibm 1

2 Arm 1

3 Nvidia 1

4 Moodle 1

5 Appsanywhere 1

All CWE-226 CVEs (6)

CVE-2025-0647

7.9

This CVE describes a CPU-level vulnerability in certain Arm processors where a specific instruction (CPP RCTX) can prevent proper TLB invalidation, ca...

Jan 14, 2026

CVE-2024-38275

7.5

The cURL wrapper in Moodle fails to strip HTTP authorization headers when following redirects, potentially exposing authentication credentials to thir...

Jun 18, 2024

CVE-2023-41138

7.5

This vulnerability allows a local user process to trick the AppsAnywhere macOS client-privileged helper into executing arbitrary commands with elevate...

Nov 9, 2023

CVE-2025-13108

5.5

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 contains an information disclosure vulnerability where sensitive data in memory may be acces...

Feb 17, 2026

CVE-2025-33196

4.4

This vulnerability in NVIDIA DGX Spark GB10's SROOT firmware allows resource reuse, potentially enabling information disclosure. Attackers could explo...

Nov 25, 2025

CVE-2025-20622

3.8

This vulnerability in Intel NPU Drivers for Windows allows unprivileged local users to potentially access sensitive information left in memory after r...

Nov 11, 2025

About CWE-226 (CWE-226)

Our database tracks 6 CVEs classified as CWE-226, with 0 rated critical and 3 rated high severity. The average CVSS score for CWE-226 vulnerabilities is 6.1.

External reference: View CWE-226 on MITRE CWE →

Monitor CWE-226 Vulnerabilities

Get alerted when new CWE-226 CVEs affect your infrastructure.

Start Monitoring Free