CWE-393 — known CVE vulnerabilities

CVEs classified under CWE-393, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2026-9058: Szafir SDK returns a success status code from the cryptographic digital signature verification process (i.e. /VerifyingTaskItem/Signature/Ve…
• CVE-2024-49117 — CVSS 8.8 (high): Windows Hyper-V Remote Code Execution Vulnerability
• CVE-2025-5987 — CVSS 8.1 (high): A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this…
• CVE-2026-53092 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the…
• CVE-2025-24531 — CVSS 6.7 (medium): In OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in many error situations (such as an error triggered…