@blamejs/exceptd-skills 0.18.26 → 0.18.27

package/data/cwe-catalog.json

@@ -1,7 +1,7 @@
 {
   "_meta": {
     "schema_version": "1.0.0",
-    "last_updated": "2026-07-18",
+    "last_updated": "2026-07-30",
     "cwe_version": "4.20",
     "cwe_version_release_date": "2026-04-30",
     "source": "https://cwe.mitre.org",
@@ -49,8 +49,11 @@
     ],
     "evidence_cves": [
       "CVE-2016-3714",
+      "CVE-2021-25489",
       "CVE-2022-1471",
       "CVE-2023-22515",
+      "CVE-2023-23397",
+      "CVE-2023-2868",
       "CVE-2023-36563",
       "CVE-2023-36761",
       "CVE-2023-41061",
@@ -113,6 +116,9 @@
       "CVE-2021-26086",
       "CVE-2021-41277",
       "CVE-2021-43798",
+      "CVE-2022-41328",
+      "CVE-2023-32315",
+      "CVE-2023-35081",
       "CVE-2023-38950",
       "CVE-2023-41266",
       "CVE-2023-43472",
@@ -193,9 +199,13 @@
       "CVE-2016-10033",
       "CVE-2016-20017",
       "CVE-2020-25079",
+      "CVE-2021-27878",
       "CVE-2021-33515",
+      "CVE-2023-1389",
       "CVE-2023-1671",
       "CVE-2023-20118",
+      "CVE-2023-20887",
+      "CVE-2023-2868",
       "CVE-2023-33538",
       "CVE-2024-12356",
       "CVE-2024-12450",
@@ -253,18 +263,25 @@
     ],
     "evidence_cves": [
       "CVE-2014-6278",
+      "CVE-2017-18368",
       "CVE-2017-3506",
       "CVE-2017-6884",
       "CVE-2018-14933",
       "CVE-2018-9276",
       "CVE-2019-11001",
+      "CVE-2019-17621",
+      "CVE-2019-20500",
       "CVE-2019-7256",
+      "CVE-2020-12641",
       "CVE-2020-15415",
       "CVE-2021-20035",
       "CVE-2021-36380",
       "CVE-2021-40407",
+      "CVE-2022-29303",
       "CVE-2023-20273",
       "CVE-2023-25280",
+      "CVE-2023-27992",
+      "CVE-2023-28771",
       "CVE-2023-39780",
       "CVE-2023-43208",
       "CVE-2023-44221",
@@ -303,6 +320,7 @@
       "CVE-2025-66644",
       "CVE-2025-9377",
       "CVE-2026-10520",
+      "CVE-2026-16812",
       "CVE-2026-1731",
       "CVE-2026-22252",
       "CVE-2026-22688",
@@ -355,8 +373,12 @@
       "CVE-2014-2120",
       "CVE-2020-11023",
       "CVE-2020-13965",
+      "CVE-2020-35730",
       "CVE-2021-26829",
+      "CVE-2022-27926",
+      "CVE-2022-39197",
       "CVE-2023-34192",
+      "CVE-2023-37580",
       "CVE-2023-43770",
       "CVE-2023-5631",
       "CVE-2023-6571",
@@ -439,6 +461,8 @@
     ],
     "evidence_cves": [
       "CVE-2020-29574",
+      "CVE-2021-44026",
+      "CVE-2023-34362",
       "CVE-2023-46748",
       "CVE-2023-48788",
       "CVE-2024-29824",
@@ -495,14 +519,18 @@
       "CVE-2011-3402",
       "CVE-2013-3918",
       "CVE-2017-1000353",
+      "CVE-2017-7494",
       "CVE-2018-14667",
       "CVE-2020-25078",
       "CVE-2021-3129",
+      "CVE-2021-39144",
       "CVE-2021-44529",
       "CVE-2022-24816",
       "CVE-2022-43769",
       "CVE-2022-48503",
       "CVE-2023-24955",
+      "CVE-2023-25717",
+      "CVE-2023-29492",
       "CVE-2023-33246",
       "CVE-2023-41179",
       "CVE-2023-44467",
@@ -618,6 +646,8 @@
       "kernel-lpe-triage"
     ],
     "evidence_cves": [
+      "CVE-2021-25487",
+      "CVE-2023-28204",
       "CVE-2023-36424",
       "CVE-2023-42916",
       "CVE-2024-0519",
@@ -668,9 +698,12 @@
       "webapp-security"
     ],
     "evidence_cves": [
+      "CVE-2015-5317",
+      "CVE-2016-6415",
       "CVE-2020-3259",
       "CVE-2021-41277",
       "CVE-2023-21237",
+      "CVE-2023-28432",
       "CVE-2023-43791",
       "CVE-2023-47117",
       "CVE-2023-49103",
@@ -678,6 +711,7 @@
       "CVE-2024-24919",
       "CVE-2024-40635",
       "CVE-2025-31125",
+      "CVE-2025-68686",
       "CVE-2026-20133",
       "CVE-2026-20805"
     ],
@@ -777,9 +811,12 @@
     "evidence_cves": [
       "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
       "CVE-2013-0643",
+      "CVE-2016-0165",
+      "CVE-2019-1388",
       "CVE-2021-43226",
       "CVE-2022-38028",
       "CVE-2023-28434",
+      "CVE-2023-32046",
       "CVE-2023-35674",
       "CVE-2023-42824",
       "CVE-2024-21626",
@@ -822,7 +859,15 @@
       "idp-incident-response"
     ],
     "evidence_cves": [
+      "CVE-2016-3427",
+      "CVE-2021-27876",
       "CVE-2023-23752",
+      "CVE-2023-24489",
+      "CVE-2023-26360",
+      "CVE-2023-27350",
+      "CVE-2023-29298",
+      "CVE-2023-38205",
+      "CVE-2023-38606",
       "CVE-2024-20767",
       "CVE-2024-27348",
       "CVE-2024-40766",
@@ -882,12 +927,15 @@
       "CVE-2017-7921",
       "CVE-2019-19006",
       "CVE-2020-10148",
+      "CVE-2021-27877",
       "CVE-2021-32030",
       "CVE-2021-33044",
       "CVE-2021-33045",
       "CVE-2022-0492",
+      "CVE-2023-20867",
       "CVE-2023-27351",
       "CVE-2023-28461",
+      "CVE-2023-35078",
       "CVE-2023-35082",
       "CVE-2023-46805",
       "CVE-2024-12776",
@@ -902,6 +950,7 @@
       "CVE-2025-3935",
       "CVE-2025-49706",
       "CVE-2025-64513",
+      "CVE-2026-16232",
       "CVE-2026-20127",
       "CVE-2026-20182",
       "CVE-2026-46817",
@@ -941,7 +990,10 @@
     "evidence_cves": [
       "CVE-2018-19410",
       "CVE-2020-24363",
+      "CVE-2021-39144",
       "CVE-2022-23227",
+      "CVE-2023-21839",
+      "CVE-2023-27532",
       "CVE-2023-28461",
       "CVE-2023-36846",
       "CVE-2023-36847",
@@ -1370,7 +1422,11 @@
       "kernel-lpe-triage"
     ],
     "evidence_cves": [
+      "CVE-2014-0196",
       "CVE-2020-17103-REREGRESSION-2026",
+      "CVE-2021-25394",
+      "CVE-2021-25395",
+      "CVE-2023-36884",
       "CVE-2025-62215",
       "CVE-2026-31635",
       "CVE-2026-33825",
@@ -1408,10 +1464,21 @@
       "CVE-2010-0249",
       "CVE-2010-0806",
       "CVE-2012-4792",
+      "CVE-2016-9079",
+      "CVE-2019-8526",
       "CVE-2020-9715",
+      "CVE-2021-25394",
+      "CVE-2021-29256",
       "CVE-2022-22071",
       "CVE-2022-2586",
+      "CVE-2022-3038",
+      "CVE-2022-38181",
+      "CVE-2023-0266",
       "CVE-2023-21608",
+      "CVE-2023-28205",
+      "CVE-2023-29336",
+      "CVE-2023-32373",
+      "CVE-2023-32409",
       "CVE-2023-33063",
       "CVE-2023-36802",
       "CVE-2023-41974",
@@ -1586,6 +1653,7 @@
       "webapp-security"
     ],
     "evidence_cves": [
+      "CVE-2016-8735",
       "CVE-2017-3066",
       "CVE-2018-0824",
       "CVE-2018-15133",
@@ -1597,9 +1665,13 @@
       "CVE-2020-2551",
       "CVE-2020-2883",
       "CVE-2021-31196",
+      "CVE-2021-39144",
       "CVE-2022-1471",
       "CVE-2022-21445",
+      "CVE-2022-31199",
       "CVE-2023-21529",
+      "CVE-2023-21839",
+      "CVE-2023-26359",
       "CVE-2023-29300",
       "CVE-2023-38203",
       "CVE-2023-40044",
@@ -1648,6 +1720,7 @@
       "CVE-2026-31229",
       "CVE-2026-45247",
       "CVE-2026-45659",
+      "CVE-2026-50522",
       "CVE-2026-58644"
     ],
     "framework_controls_partially_addressing": [
@@ -1924,12 +1997,20 @@
     "evidence_cves": [
       "CVE-2009-1537",
       "CVE-2013-0648",
+      "CVE-2013-3163",
       "CVE-2021-22555",
+      "CVE-2021-25372",
+      "CVE-2021-30900",
       "CVE-2023-20109",
       "CVE-2023-26369",
+      "CVE-2023-27997",
+      "CVE-2023-28206",
+      "CVE-2023-28252",
+      "CVE-2023-32435",
       "CVE-2023-34048",
       "CVE-2023-3519",
       "CVE-2023-36036",
+      "CVE-2023-37450",
       "CVE-2023-41990",
       "CVE-2023-42917",
       "CVE-2023-4863",
@@ -2132,9 +2213,12 @@
       "webapp-security"
     ],
     "evidence_cves": [
+      "CVE-2021-3560",
       "CVE-2021-40655",
       "CVE-2023-20269",
       "CVE-2023-22518",
+      "CVE-2023-24880",
+      "CVE-2023-38035",
       "CVE-2024-21287",
       "CVE-2024-38856",
       "CVE-2025-21479",
@@ -2485,6 +2569,7 @@
     "evidence_cves": [
       "CVE-2020-17103-REREGRESSION-2026",
       "CVE-2022-48618",
+      "CVE-2023-35311",
       "CVE-2024-0132",
       "CVE-2024-30088"
     ],
@@ -2533,6 +2618,7 @@
     ],
     "evidence_cves": [
       "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
+      "CVE-2023-32049",
       "CVE-2023-36025",
       "CVE-2023-36584",
       "CVE-2024-21412",
@@ -2604,6 +2690,7 @@
     ],
     "related_weaknesses": [],
     "evidence_cves": [
+      "CVE-2023-36874",
       "CVE-2025-21391",
       "CVE-2025-48384",
       "CVE-2025-60710",
@@ -2672,6 +2759,8 @@
       "CVE-2013-0648",
       "CVE-2014-3931",
       "CVE-2017-1000253",
+      "CVE-2017-6742",
+      "CVE-2022-22706",
       "CVE-2023-33106",
       "CVE-2023-36033",
       "CVE-2023-4966",
@@ -2705,6 +2794,8 @@
     "evidence_cves": [
       "CVE-2020-15069",
       "CVE-2022-37055",
+      "CVE-2023-33009",
+      "CVE-2023-33010",
       "CVE-2023-41064",
       "CVE-2025-20333",
       "CVE-2025-43520"
@@ -2753,6 +2844,8 @@
       "CVE-2018-14634",
       "CVE-2021-30952",
       "CVE-2022-0185",
+      "CVE-2023-2136",
+      "CVE-2023-32434",
       "CVE-2023-33107",
       "CVE-2023-6345",
       "CVE-2024-38080",
@@ -3086,6 +3179,9 @@
     ],
     "related_weaknesses": [],
     "evidence_cves": [
+      "CVE-2023-2033",
+      "CVE-2023-3079",
+      "CVE-2023-32439",
       "CVE-2023-4762",
       "CVE-2024-23222",
       "CVE-2024-38178",
@@ -3239,6 +3335,8 @@
     "related_weaknesses": [],
     "evidence_cves": [
       "CVE-2009-3459",
+      "CVE-2023-27997",
+      "CVE-2023-28252",
       "CVE-2023-36036",
       "CVE-2023-4911",
       "CVE-2024-30051",
@@ -3428,7 +3526,9 @@
     ],
     "related_weaknesses": [],
     "evidence_cves": [
+      "CVE-2004-1464",
       "CVE-2023-29552",
+      "CVE-2023-38180",
       "CVE-2023-44487",
       "CVE-2023-50868",
       "CVE-2026-24215",
@@ -3760,6 +3860,7 @@
     ],
     "related_weaknesses": [],
     "evidence_cves": [
+      "CVE-2023-21492",
       "CVE-2025-24984"
     ],
     "last_verified": "2026-05-19",
@@ -4122,6 +4223,7 @@
     ],
     "related_weaknesses": [],
     "evidence_cves": [
+      "CVE-2021-3560",
       "CVE-2023-41992",
       "CVE-2023-41993",
       "CVE-2024-3393"
@@ -4379,7 +4481,9 @@
       "CWE-2000"
     ],
     "related_weaknesses": [],
-    "evidence_cves": [],
+    "evidence_cves": [
+      "CVE-2021-45046"
+    ],
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
     "_auto_imported": true,
@@ -4723,7 +4827,9 @@
       "CWE-2000"
     ],
     "related_weaknesses": [],
-    "evidence_cves": [],
+    "evidence_cves": [
+      "CVE-2010-3904"
+    ],
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
     "_auto_imported": true,
@@ -5042,6 +5148,7 @@
     ],
     "skills_referencing": [],
     "evidence_cves": [
+      "CVE-2022-42948",
       "CVE-2024-38475",
       "CVE-2026-20245"
     ],
@@ -5086,6 +5193,7 @@
     ],
     "skills_referencing": [],
     "evidence_cves": [
+      "CVE-2021-25371",
       "CVE-2024-20439",
       "CVE-2025-47729"
     ],
@@ -5452,6 +5560,7 @@
     ],
     "skills_referencing": [],
     "evidence_cves": [
+      "CVE-2021-25489",
       "CVE-2024-23113"
     ],
     "framework_controls_partially_addressing": [
@@ -5962,6 +6071,7 @@
     ],
     "skills_referencing": [],
     "evidence_cves": [
+      "CVE-2023-20963",
       "CVE-2023-41991"
     ],
     "framework_controls_partially_addressing": [
@@ -6040,6 +6150,7 @@
     "related_attack_patterns_capec": [],
     "skills_referencing": [],
     "evidence_cves": [
+      "CVE-2021-25372",
       "CVE-2022-22265"
     ],
     "framework_controls_partially_addressing": [
@@ -6077,5 +6188,65 @@
     "real_requirement": "Memory-safe languages or bounds-checked pointer arithmetic; hardware memory tagging (MTE) and guard pages where native code is unavoidable. Treat the same as CWE-787/125 — an out-of-range-offset read is the enabler for a chained OOB-write RCE, not merely an information leak.",
     "lag_notes": "Frameworks fold pointer-offset defects into generic \"memory protection\" (SI-16) without recognizing out-of-range-offset as the arithmetic root cause that mitigations like ASLR do not prevent; baseband/DSP CVEs (e.g. CVE-2023-33106) are exploited before any OS-level mitigation applies.",
     "last_verified": "2026-07-21"
+  },
+  "CWE-401": {
+    "id": "CWE-401",
+    "name": "Missing Release of Memory after Effective Lifetime",
+    "abstraction": "Variant",
+    "category": "Resource Management",
+    "description": "The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse. In kernel and driver contexts a memory leak reachable by an unprivileged caller can be driven to exhaustion or combined with other primitives to disclose or corrupt adjacent state.",
+    "top_25_rank_2024": null,
+    "top_25_rank_2025": null,
+    "view_memberships": [
+      "CWE-1003",
+      "CWE-1000"
+    ],
+    "related_attack_patterns_capec": [],
+    "skills_referencing": [],
+    "evidence_cves": [
+      "CVE-2023-26083"
+    ],
+    "framework_controls_partially_addressing": [
+      "NIST-800-53-SI-2",
+      "NIST-800-53-SC-5",
+      "ISO-27001-2022-A.8.8"
+    ],
+    "real_requirement": "Deterministic lifetime management (RAII/ownership, allocator instrumentation, and fuzzing that asserts allocation/free balance) at trust boundaries, plus kernel-driver hardening so a leak reachable from an unprivileged context cannot be turned into an information-disclosure or exhaustion primitive.",
+    "lag_notes": "SI-2 flaw remediation and A.8.8 technical-vulnerability management treat a memory leak as a routine defect on a periodic patch cycle; neither compels the allocator-balance testing or driver attack-surface reduction that would prevent an unprivileged reachable leak from being weaponized on a shared kernel.",
+    "last_verified": "2026-07-29"
+  },
+  "CWE-294": {
+    "id": "CWE-294",
+    "name": "Authentication Bypass by Capture-replay",
+    "abstraction": "Base",
+    "category": "Authentication",
+    "description": "A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes). Coerced-authentication and relay attacks against challenge-response schemes (e.g. NTLM) are the canonical exploited form.",
+    "top_25_rank_2024": null,
+    "top_25_rank_2025": null,
+    "view_memberships": [
+      "CWE-1003",
+      "CWE-1000"
+    ],
+    "related_attack_patterns_capec": [
+      "CAPEC-60",
+      "CAPEC-94",
+      "CAPEC-102",
+      "CAPEC-644",
+      "CAPEC-645",
+      "CAPEC-652",
+      "CAPEC-701"
+    ],
+    "skills_referencing": [],
+    "evidence_cves": [
+      "CVE-2023-23397"
+    ],
+    "framework_controls_partially_addressing": [
+      "NIST-800-53-IA-2",
+      "NIST-800-53-SC-8",
+      "ISO-27001-2022-A.5.15"
+    ],
+    "real_requirement": "Replay-resistant authentication (channel binding, per-message nonces/timestamps, signed challenge-response) and blocking outbound authentication to untrusted hosts, so a captured authenticator cannot be relayed — password rotation and account lockout do not address a protocol that accepts a replayed credential.",
+    "lag_notes": "IA-2 identification-and-authentication and A.5.15 access-control assume the authenticator is secret; they do not mandate the channel binding or egress control that stops a coerced NTLM authentication from being relayed, which is the actual exploited path.",
+    "last_verified": "2026-07-29"
   }
 }