CWE-364 — known CVE vulnerabilities

CVEs classified under CWE-364, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2026-24792 — CVSS 8.1 (high): in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
• CVE-2024-6409 — CVSS 7.0 (high): A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not…
• CVE-2026-42002 — CVSS 5.9 (medium): Concurrency and locking defects in GSS-TSIG
• CVE-2026-27766 — CVSS 5.5 (medium): in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.
• CVE-2020-14317 — CVSS 5.5 (medium): It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform -…
• CVE-1999-0035 — CVSS 5.4 (medium): Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
• CVE-2025-4598 — CVSS 4.7 (medium): A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID…
• CVE-2026-33565 — CVSS 3.3 (low): in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.