# CWE-229. Every Advisory and CVE whose sources give the weakness CWE-229, newest first. ## Records, newest first - [Local denial-of-service](https://agentprime.io/advisories/CVE-2026-59566.md) `CVE-2026-59566` · CVE record: Zscaler Client Connector · CVSS 8.4 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-229 - [Local and kernel denial-of-service](https://agentprime.io/advisories/CVE-2026-59565.md) `CVE-2026-59565` · CVE record: Zscaler Client Connector · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-229 - [Intel(R) Processors: Improper handling of values for some Intel(R) Processors within Ring 0: Kernel…](https://agentprime.io/advisories/CVE-2025-35973.md) `CVE-2025-35973` · CVE record: Intel(R) Processors · CVSS 4.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-229 - [Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-45602.md) `CVE-2026-45602` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-229, CWE-349 - [Improper input validation in Open-Xchange GmbH OX Dovecot Pro](https://agentprime.io/advisories/CVE-2025-59032.md) `CVE-2025-59032` · CVE record: Open-Xchange GmbH OX Dovecot Pro · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-20, CWE-229 - [Math Issue in No-Chicken/Echo-Mate](https://agentprime.io/advisories/CVE-2026-4736.md) `CVE-2026-4736` · CVE record: No-Chicken Echo-Mate · CVSS 7.3 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-229 - [Intel(R) Processor Family may allow an escalation of…: Improper handling of values in the microcode flow for some Intel(R) Processor Family may…](https://agentprime.io/advisories/CVE-2025-31648.md) `CVE-2025-31648` · CVE record: Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts. · CVSS 1.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-229 - [Zigbee Router Denial of Service](https://agentprime.io/advisories/CVE-2025-7964.md) `CVE-2025-7964` · CVE record: silabs.com Silicon Labs Zigbee Stack · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jan 2026 · Tags: CWE-229 - [Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20268.md) `CVE-2025-20268` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-229 - [A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy.](https://agentprime.io/advisories/CVE-2024-20431.md) `CVE-2024-20431` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: CWE-229 - [sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos](https://agentprime.io/advisories/GHSA-42q2-m54f-jh95.md) `GHSA-42q2-m54f-jh95`, `CVE-2022-4851`, `GO-2023-1285` · Go `github.com/usememos/memos`: affected `<0.9.1`, fixed in `0.9.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2024 · Tags: CWE-229 - [Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols](https://agentprime.io/advisories/CVE-2024-39531.md) `CVE-2024-39531` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-229 - [Improper input validation in OneFlow-Inc.](https://agentprime.io/advisories/CVE-2024-36737.md) `CVE-2024-36737` · CVE record · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-20, CWE-229 - [PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.](https://agentprime.io/advisories/CVE-2024-30800.md) `CVE-2024-30800` · CVE record · CVSS 5.6 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: CWE-229 - [An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted history_depth parameter in D…](https://agentprime.io/advisories/CVE-2024-30917.md) `CVE-2024-30917` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 11 Apr 2024 · Tags: Information disclosure, CWE-229 - [An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component.](https://agentprime.io/advisories/CVE-2024-29460.md) `CVE-2024-29460` · CVE record · CVSS 6.6 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-229 - [Kernel: nf_tables: pointer math issue in nft_byteorder_eval()](https://agentprime.io/advisories/CVE-2024-0607.md) `CVE-2024-0607` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-229 - [Unauthenticated out of bounds stack write in bmcweb](https://agentprime.io/advisories/CVE-2022-3409.md) `CVE-2022-3409` · CVE record: OpenBMC Project OpenBMC · CVSS 8.2 High · Not analysed yet · Published 27 Oct 2022 · Tags: Memory corruption, CWE-229 - [Unauthenticated out of bounds heap write in bmcweb](https://agentprime.io/advisories/CVE-2022-2809.md) `CVE-2022-2809` · CVE record: OpenBMC Project OpenBMC · CVSS 8.2 High · Not analysed yet · Published 27 Oct 2022 · Tags: Memory corruption, CWE-229 - [Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability.](https://agentprime.io/advisories/CVE-2022-24412.md) `CVE-2022-24412` · CVE record: Dell PowerScale OneFS · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-229 - [Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit.](https://agentprime.io/advisories/CVE-2022-22562.md) `CVE-2022-22562` · CVE record: Dell PowerScale OneFS · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-229 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .