CWE-19: Data Processing Errors

Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.

What the weakness is: CWE-19 at MITRE

1. 7.5CVE-2026-1011862026-11-02

   DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

2. 4.7CVE-2026-1011792026-11-02

   Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.

3. 7.5CVE-2026-28552EPSS 0.3%2026-03-05

   Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.

4. 5.5CVE-2026-28539EPSS 0.06%2026-03-05

   Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

5. 7.4CVE-2025-20311EPSS 0.2%2025-09-24

   A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic…

6. 7.5CVE-2023-39395EPSS 0.4%2023-08-13

   Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

7. 5.9CVE-2021-0263EPSS 0.9%2021-04-22

   A Data Processing vulnerability in the Multi-Service process (multi-svcs) on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an…

8. 8.6CVE-2020-3414EPSS 1.9%2020-09-24

   A vulnerability in the packet processing of Cisco IOS XE Software for Cisco 4461 Integrated Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) cond…

9. 6.5CVE-2020-1651EPSS 0.5%2020-07-17

   On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. By continuously send…

10. 7.7CVE-2020-3232EPSS 1.0%2020-06-03

    A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulne…

11. 7.5CVE-2019-14794EPSS 1.4%2019-08-09

    The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders.

12. 9.8CVE-2019-13917EPSS 8.6%2019-07-25

    Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $local_part or $domain).

13. 4.4CVE-2019-4236EPSS 0.3%2019-07-22

    A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries associated with the obje…

14. 9.8CVE-2019-13624EPSS 1.9%2019-07-17

    In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings that can be used in a shell command.

15. 7.5CVE-2019-1083EPSS 7.8%2019-07-15

    A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.

16. 7.5CVE-2019-0811EPSS 4.5%2019-07-15

    A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.

17. 8.8CVE-2019-12828ExploitEPSS 13%2019-06-14

    An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code …

18. 4.4CVE-2019-0941EPSS 3.0%2019-06-12

    A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages…

19. 8.8CVE-2019-9673EPSS 4.0%2019-06-05

    Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.

20. 6.7CVE-2019-0089EPSS 0.4%2019-05-17

    Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 may allow a privileged user to potentially enable es…

21. 7.5CVE-2019-0982EPSS 6.7%2019-05-16

    A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

22. 7.5CVE-2019-0981EPSS 4.9%2019-05-16

    A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

23. 7.5CVE-2019-0980EPSS 4.9%2019-05-16

    A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

24. 7.8CVE-2019-0947EPSS 14%2019-05-16

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is u…

25. 7.8CVE-2019-0946EPSS 14%2019-05-16

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is u…

26. 7.8CVE-2019-0945EPSS 14%2019-05-16

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is u…

27. 5.3CVE-2019-11070EPSS 3.3%2019-04-10

    WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by…

28. 5.5CVE-2006-7254EPSS 0.3%2019-04-10

    The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.

29. 5.4CVE-2019-0817EPSS 2.3%2019-04-09

    A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858.

30. 7.5CVE-2019-0815EPSS 7.0%2019-04-09

    A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

31. 7.8CVE-2019-0801EPSS 19%2019-04-09

    A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel …

32. 7.5CVE-2018-4329EPSS 1.2%2019-04-03

    Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12.

33. 7.5CVE-2019-10477EPSS 1.8%2019-03-29

    The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.

34. 9.8CVE-2019-9870EPSS 1.8%2019-03-21

    plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.

35. 8.8CVE-2019-0633EPSS 13%2019-03-05

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.

36. 8.8CVE-2019-0630EPSS 17%2019-03-05

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.

37. 7.5CVE-2019-9573EPSS 1.8%2019-03-05

    The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.

38. 7.5CVE-2019-9563EPSS 1.5%2019-03-04

    In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.

39. 7.5CVE-2009-5155EPSS 3.9%2019-02-26

    In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by …

40. 9.8CVE-2018-5915EPSS 1.3%2019-01-18

    Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD…

41. 9.8CVE-2019-6440EPSS 3.0%2019-01-16

    Zemana AntiMalware before 3.0.658 Beta mishandles update logic.

42. 5.9CVE-2019-3554EPSS 1.1%2019-01-15

    Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.…

43. 7.5CVE-2019-0014EPSS 1.7%2019-01-15

    On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeated…

44. 7.5CVE-2019-0013EPSS 1.7%2019-01-15

    The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service (DoS) condition. This…

45. 6.5CVE-2018-6133EPSS 1.4%2019-01-09

    Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

46. 8.8CVE-2018-6106EPSS 1.7%2019-01-09

    An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page.

47. 6.5CVE-2018-6100EPSS 1.4%2019-01-09

    Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

48. 6.5CVE-2018-6097EPSS 1.4%2019-01-09

    Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page.

49. 6.5CVE-2018-6091EPSS 2.1%2019-01-09

    Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

50. 7.5CVE-2019-0564EPSS 8.4%2019-01-08

    A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.