CWE-166 — known CVE vulnerabilities

CVEs classified under CWE-166, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-21218 — CVSS 7.5 (high): Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.
• CVE-2024-38091 — CVSS 7.5 (high): Microsoft WS-Discovery Denial of Service Vulnerability