CWE-120 vulnerabilities
CWE-120 · 12 tracked
CWE-120 (CWE-120) is a recognized software weakness class in the MITRE CWE catalog. The vulnerabilities below are all instances of this pattern.
How it’s exploited
How cwe-120 is exploited depends on the specific vulnerability, but every CVE in this class shares the same underlying flaw pattern — which is why the same class of mitigation applies across them.
How to prevent it
Recognizing the cwe-120 pattern lets you apply one class of fix across every affected component. Each CVE page below carries specific, version-level remediation.
Tracked cwe-120 vulnerabilities
12 CVEs in this class, each with severity, exploit status, EPSS, and remediation.
CVE-2022-41793CVE-2025-26240CVE-2026-54257GHSA-hc3c-63hc-2r9fCVE-2026-27820CVE-2025-64182CVE-2026-27459CVE-2026-27942CVE-2026-24807CVE-2025-68383GHSA-wwxp-hxh6-8gf8CVE-2025-54469
Frequently asked questions
- What is CWE-120?
- CWE-120 (CWE-120) is a recognized software weakness class in the MITRE CWE catalog. The vulnerabilities below are all instances of this pattern.
- How is cwe-120 exploited?
- How cwe-120 is exploited depends on the specific vulnerability, but every CVE in this class shares the same underlying flaw pattern — which is why the same class of mitigation applies across them.
- How do you prevent cwe-120?
- Recognizing the cwe-120 pattern lets you apply one class of fix across every affected component. Each CVE page below carries specific, version-level remediation.
- How many cwe-120 vulnerabilities are there?
- O3 tracks 12 vulnerabilities classified as CWE-120 (this weakness class), each with severity, exploit status, EPSS exploitation probability, and remediation. The full list is below.