← All weakness types
Missing Authentication for Critical Function
CWE-3062,546 vulnerabilities are classified as Missing Authentication for Critical Function (CWE-306). The most exploitable are shown first (by EPSS), each with its CVSS score, exploit-prediction, CISA KEV status, and available fix.
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2017-10271 | High | 7.5 | 100% | KEV + Ransom | - |
| CVE-2025-3248 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2023-42793 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2022-1388 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2021-37415 | Critical | 9.8 | 100% | KEV | - |
| CVE-2023-21839 | High | 7.5 | 100% | KEV | - |
| CVE-2024-0012 | Critical | 9.8 | 100% | KEV + Ransom | - |
| CVE-2020-13927 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2025-32433 | Critical | 10.0 | 99% | KEV | Fix |
| CVE-2025-0108 | Critical | 9.1 | 98% | KEV | Fix |
| CVE-2022-21587 | Critical | 9.8 | 98% | KEV + Ransom | - |
| CVE-2020-6207 | Critical | 9.8 | 98% | KEV | - |
| CVE-2026-33017 | Critical | 9.8 | 98% | KEV | Fix |
| CVE-2021-39144 | High | 8.5 | 98% | KEV | Fix |
| CVE-2026-41940 | Critical | 9.8 | 98% | KEV + Ransom | Fix |
| CVE-2019-9082 | High | 8.8 | 97% | KEV | Fix |
| CVE-2025-34028 | Critical | 10.0 | 97% | KEV | Fix |
| CVE-2023-46747 | Critical | 9.8 | 97% | KEV + Ransom | - |
| CVE-2021-35587 | Critical | 9.8 | 96% | KEV | - |
| CVE-2026-39987 | Critical | 9.8 | 96% | KEV | Fix |
| CVE-2025-4008 | High | 8.8 | 95% | KEV | Fix |
| CVE-2024-47575 | Critical | 9.8 | 95% | KEV | Fix |
| CVE-2020-6287 | Critical | 10.0 | 95% | KEV | - |
| CVE-2016-2004 | Critical | 9.8 | 94% | - | Fix |
| CVE-2023-36846 | Medium | 5.3 | 94% | KEV | Fix |
| CVE-2021-44077 | Critical | 9.8 | 94% | KEV | Fix |
| CVE-2026-35273 | Critical | 9.8 | 92% | KEV + Ransom | - |
| CVE-2020-10148 | Critical | 9.8 | 92% | KEV | - |
| CVE-2024-5910 | Critical | 9.8 | 92% | KEV | Fix |
| CVE-2024-11680 | Critical | 9.8 | 92% | KEV | Fix |
| CVE-2020-3952 | Critical | 9.8 | 90% | KEV | - |
| CVE-2020-12720 | Critical | 9.8 | 89% | - | Fix |
| CVE-2025-61757 | Critical | 9.8 | 88% | KEV | - |
| CVE-2026-20253 | Critical | 9.8 | 88% | KEV | Fix |
| CVE-2018-7357 | Medium | 6.5 | 88% | - | - |
| CVE-2026-24423 | Critical | 9.8 | 88% | KEV + Ransom | Fix |
| CVE-2022-26143 | Critical | 9.8 | 88% | KEV | Fix |
| CVE-2024-51567 | Critical | 10.0 | 87% | KEV + Ransom | Fix |
| CVE-2021-45232 | Critical | 9.8 | 86% | - | Fix |
| CVE-2019-8449 | Medium | 5.3 | 85% | - | Fix |
| CVE-2023-36847 | Medium | 5.3 | 85% | KEV | Fix |
| CVE-2022-24990 | High | 7.5 | 84% | KEV + Ransom | Fix |
| CVE-2021-25094 | High | 8.1 | 83% | - | Fix |
| CVE-2023-21931 | High | 7.5 | 82% | - | - |
| CVE-2021-33543 | Critical | 9.8 | 82% | - | - |
| CVE-2020-9315 | High | 7.5 | 82% | - | - |
| CVE-2024-10924 | Critical | 9.8 | 82% | - | Fix |
| CVE-2021-38540 | Critical | 9.8 | 81% | - | Fix |
| CVE-2014-9195 | High | 10.0 | 81% | - | - |
| CVE-2026-1603 | High | 8.6 | 81% | KEV | Fix |
| CVE-2021-1499 | Medium | 5.3 | 80% | - | Fix |
| CVE-2014-4872 | High | 7.5 | 80% | - | - |
| CVE-2022-23944 | Critical | 9.1 | 79% | - | - |
| CVE-2023-27532 | High | 7.5 | 78% | KEV + Ransom | Fix |
| CVE-2018-0127 | Critical | 9.8 | 77% | - | - |
| CVE-2023-22047 | High | 7.5 | 77% | - | - |
| CVE-2020-35951 | Critical | 9.9 | 76% | - | Fix |
| CVE-2017-5637 | High | 7.5 | 74% | - | Fix |
| CVE-2025-8943 | Critical | 9.8 | 72% | - | Fix |
| CVE-2018-18264 | High | 7.5 | 70% | - | Fix |
| CVE-2019-5620 | Critical | 9.8 | 70% | - | - |
| CVE-2021-34621 | Critical | 9.8 | 69% | - | - |
| CVE-2021-29203 | Critical | 9.8 | 68% | - | Fix |
| CVE-2023-28461 | Critical | 9.8 | 68% | KEV + Ransom | - |
| CVE-2019-13101 | Critical | 9.8 | 67% | - | - |
| CVE-2022-3229 | Critical | 9.8 | 66% | - | - |
| CVE-2021-29442 | High | 8.6 | 65% | - | Fix |
| CVE-2020-7115 | Critical | 9.8 | 65% | - | Fix |
| CVE-2019-15043 | High | 7.5 | 63% | - | Fix |
| CVE-2024-46506 | Critical | 10.0 | 63% | - | Fix |
| CVE-2019-6447 | High | 8.1 | 62% | - | - |
| CVE-2024-8956 | Critical | 9.1 | 61% | KEV | Fix |
| CVE-2021-44152 | Critical | 9.8 | 59% | - | Fix |
| CVE-2019-17506 | Critical | 9.8 | 57% | - | - |
| CVE-2021-33221 | Critical | 9.8 | 57% | - | - |
| CVE-2024-23917 | Critical | 9.8 | 54% | - | Fix |
| CVE-2022-24562 | Critical | 9.8 | 53% | - | - |
| CVE-2020-12028 | High | 7.3 | 53% | - | - |
| CVE-2021-38147 | High | 7.5 | 53% | - | - |
| CVE-2020-13382 | Critical | 9.1 | 53% | - | - |
| CVE-2020-11547 | Medium | 5.3 | 52% | - | Fix |
| CVE-2020-11946 | High | 7.5 | 52% | - | - |
| CVE-2022-45933 | Critical | 9.8 | 52% | - | - |
| CVE-2025-58434 | Critical | 9.8 | 50% | - | Fix |
| CVE-2022-23227 | Critical | 9.8 | 49% | KEV | - |
| CVE-2020-36239 | Critical | 9.8 | 49% | - | Fix |
| CVE-2021-41266 | High | 8.6 | 47% | - | Fix |
| CVE-2019-9879 | Critical | 9.8 | 47% | - | - |
| CVE-2019-13344 | Medium | 5.3 | 45% | - | - |
| CVE-2026-23744 | Critical | 9.8 | 44% | - | Fix |
| CVE-2019-14927 | High | 7.5 | 42% | - | - |
| CVE-2025-52665 | Critical | 10.0 | 41% | - | Fix |
| CVE-2019-18939 | Critical | 9.8 | 41% | - | - |
| CVE-2020-24217 | Critical | 9.8 | 40% | - | - |
| CVE-2021-20150 | Medium | 5.3 | 40% | - | - |
| CVE-2022-35871 | High | 7.8 | 39% | - | - |
| CVE-2025-49596 | Unscored | - | 39% | - | - |
| CVE-2026-33032 | Critical | 9.8 | 38% | - | - |
| CVE-2023-20126 | Critical | 9.8 | 38% | - | - |
| CVE-2019-16893 | High | 7.5 | 38% | - | - |
Showing the top 100 of 2,546. Browse all 2,546 in the lookup tool.
Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux endpoints for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.