# CWE-1419.

Every Advisory and CVE whose sources give the weakness CWE-1419, newest first.

## Records, newest first

- [RCE via stale global state](https://agentprime.io/advisories/CVE-2026-109619.md)
  `CVE-2026-109619` · CVE record: PHP Group PHP · CVSS 9.2 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption, CWE-755, CWE-1325, CWE-1419
- [RCE via OOM corruption](https://agentprime.io/advisories/CVE-2026-109618.md)
  `CVE-2026-109618` · CVE record: PHP Group PHP · CVSS 9.2 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption, CWE-755, CWE-1325, CWE-1419
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-105733.md)
  `CVE-2026-105733` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-1419
- [On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard f…](https://agentprime.io/advisories/CVE-2026-73451.md)
  `CVE-2026-73451` · CVE record: Arista Networks EOS · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-1419
- [Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied](https://agentprime.io/advisories/CVE-2026-33773.md)
  `CVE-2026-33773` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-1419
- [In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure.](https://agentprime.io/advisories/CVE-2026-0109.md)
  `CVE-2026-0109` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-1419
- [Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart](https://agentprime.io/advisories/CVE-2026-21913.md)
  `CVE-2026-21913` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-1419
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53800.md)
  `CVE-2025-53800` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1419
- [Intel(R) Core™ Ultra Processors: Incorrect initialization of resource in the branch prediction unit for some Intel(R)…](https://agentprime.io/advisories/CVE-2025-24495.md)
  `CVE-2025-24495` · CVE record: Intel(R) Core™ Ultra Processors · CVSS 6.8 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-1419
- [Andamiro Pump It Up: Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a…](https://agentprime.io/advisories/CVE-2024-57375.md)
  `CVE-2024-57375` · CVE record: Andamiro Pump It Up · CVSS 2.4 Low · Not analysed yet · Published 25 Apr 2025 · Tags: CWE-1419
- [CVE](https://agentprime.io/advisories/CVE-2024-0103.md)
  `CVE-2024-0103` · CVE record: nvidia NVIDIA Triton Inference Server · CVSS 5.4 Medium · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-1419
- [When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"](https://agentprime.io/advisories/CVE-2023-45085.md)
  `CVE-2023-45085` · CVE record: SoftIron HyperCloud · CVSS 3.2 Low · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-1419
- [Lenovo ThinkPad BIOS: A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local…](https://agentprime.io/advisories/CVE-2023-5078.md)
  `CVE-2023-5078` · CVE record: Lenovo ThinkPad BIOS · CVSS 6.7 Medium · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-1419

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1419>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1419/>. Everything for agents: <https://agentprime.io/llms.txt>.