CWE-412 — known CVE vulnerabilities

CVEs classified under CWE-412, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-18269 — CVSS 9.8 (critical): Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.
• CVE-2026-25612 — CVSS 6.5 (medium): The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take…
• CVE-2019-11485 — CVSS 3.3 (low): Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.