CWE-393: CWE-393

Total CVEs

Critical

High

7.4

Avg CVSS

Yearly Trend

2026

2025

Top Affected Vendors

1 Libssh 1

All CWE-393 CVEs (2)

CVE-2025-5987

8.1

This vulnerability in libssh occurs when using ChaCha20 cipher with OpenSSL, where heap exhaustion errors aren't properly detected, leading to use of ...

Jul 7, 2025

CVE-2025-24531

6.7

This vulnerability in OpenSC pam_pkcs11 allows authentication bypass when smartcard authentication fails. The pam_sm_authenticate() function incorrect...

Jan 16, 2026

About CWE-393 (CWE-393)

Our database tracks 2 CVEs classified as CWE-393, with 0 rated critical and 1 rated high severity. The average CVSS score for CWE-393 vulnerabilities is 7.4.

External reference: View CWE-393 on MITRE CWE →

Monitor CWE-393 Vulnerabilities

Get alerted when new CWE-393 CVEs affect your infrastructure.

Start Monitoring Free