CWE-412 — known CVE vulnerabilities

CVEs classified under CWE-412, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-18269 — CVSS 9.8 (critical): Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.
• CVE-2026-62426 — CVSS 8.8 (high): [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage…
• CVE-2026-25612 — CVSS 6.5 (medium): The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take…
• CVE-2019-11485 — CVSS 3.3 (low): Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.
• CVE-2026-82312: OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a…