# CWE-118.

Every Advisory and CVE whose sources give the weakness CWE-118, newest first.

## Records, newest first

- [Windows Sensor Data Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50367.md)
  `CVE-2026-50367` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-118
- [Vulnerability of incomplete verification information in the communication module.](https://agentprime.io/advisories/CVE-2025-54628.md)
  `CVE-2025-54628` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-118
- [Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-48902.md)
  `CVE-2025-48902` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-118
- [Windows Mobile Broadband Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43524.md)
  `CVE-2024-43524` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-118
- [GTKWave: Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of…](https://agentprime.io/advisories/CVE-2023-37923.md)
  `CVE-2023-37923` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-118
- [GTKWave: Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of…](https://agentprime.io/advisories/CVE-2023-37922.md)
  `CVE-2023-37922` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-118
- [GTKWave: Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of…](https://agentprime.io/advisories/CVE-2023-37921.md)
  `CVE-2023-37921` · CVE record: GTKWave GTKWave · CVSS 7.8 High · Not analysed yet · Published 8 Jan 2024 · Tags: CWE-118
- [NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service…](https://agentprime.io/advisories/CVE-2023-0201.md)
  `CVE-2023-0201` · CVE record: NVIDIA NVIDIA DGX servers · CVSS 6.7 Medium · Not analysed yet · Published 22 Apr 2023 · Tags: CWE-118
- [An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap b...](https://agentprime.io/advisories/GHSA-v5hv-4pw3-q6h9.md)
  `GHSA-v5hv-4pw3-q6h9`, `CVE-2022-38072`, `PYSEC-2023-263` · PyPI `admesh`: affected `*`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 3 Apr 2023 · Tags: CWE-118
- [There is an int overflow vulnerability in vmwgfx driver](https://agentprime.io/advisories/CVE-2022-36402.md)
  `CVE-2022-36402` · CVE record: Linux kernel · CVSS 6.3 Medium · Not analysed yet · Published 16 Sept 2022 · Tags: CWE-118
- [Cisco SD-WAN vEdge Routers Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3369.md)
  `CVE-2020-3369` · CVE record: Cisco Cisco SD-WAN vEdge router · CVSS 8.6 High · Not analysed yet · Published 16 Jul 2020 · Tags: CWE-118
- [Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-3235.md)
  `CVE-2020-3235` · CVE record: Cisco Cisco IOS 12.2(53)SG1 · CVSS 7.7 High · Not analysed yet · Published 3 Jun 2020 · Tags: CWE-118

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-118>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-118/>. Everything for agents: <https://agentprime.io/llms.txt>.