CWE-501: CWE-501

Total CVEs

Critical

High

8.0

Avg CVSS

Yearly Trend

2026

2025

2023

Top Affected Vendors

1 Anthropic 1

2 Zoom 1

3 Cli 1

All CWE-501 CVEs (5)

CVE-2026-25725

10.0

This vulnerability allows malicious code running inside Claude Code's sandbox to create a missing settings.json file and inject persistent hooks that ...

Feb 6, 2026

CVE-2025-48938

9.8

A critical vulnerability in go-gh versions before 2.12.1 allows remote code execution when users interact with malicious GitHub Enterprise Server inst...

May 30, 2025

CVE-2023-28597

8.3

Zoom clients before version 5.13.5 have a vulnerability where saving recordings to SMB locations and opening them via Zoom's web portal can allow adja...

Mar 27, 2023

CVE-2025-14542

7.5

This vulnerability allows malicious providers to execute arbitrary commands on client systems by serving malicious JSON specifications (Manuals) after...

Dec 13, 2025

CVE-2025-1118

4.4

A vulnerability in grub2 allows attackers to bypass lockdown mode and read arbitrary memory contents using the dump command. This could expose sensiti...

Feb 19, 2025

About CWE-501 (CWE-501)

Our database tracks 5 CVEs classified as CWE-501, with 2 rated critical and 2 rated high severity. The average CVSS score for CWE-501 vulnerabilities is 8.0.

External reference: View CWE-501 on MITRE CWE →

Monitor CWE-501 Vulnerabilities

Get alerted when new CWE-501 CVEs affect your infrastructure.

Start Monitoring Free