← All weakness types

External Control of File Name or Path

CWE-73

473 vulnerabilities are classified as External Control of File Name or Path (CWE-73). The most exploitable are shown first (by EPSS), each with its CVSS score, exploit-prediction, CISA KEV status, and available fix.

CVESeverityCVSSEPSSExploitedFix
CVE-2022-39952Critical9.8100%-Fix
CVE-2024-8517Critical9.895%-Fix
CVE-2023-4634Critical9.883%-Fix
CVE-2018-17246Critical9.882%-Fix
CVE-2024-43451Medium6.582%KEVFix
CVE-2025-33053High8.882%KEVFix
CVE-2023-3643High7.375%--
CVE-2021-27250Medium6.566%--
CVE-2025-24054Medium6.559%KEVFix
CVE-2024-46909Critical9.849%-Fix
CVE-2021-21343Medium5.347%-Fix
CVE-2024-26185Medium6.531%-Fix
CVE-2023-2554High7.229%-Fix
CVE-2025-0851Critical9.823%--
CVE-2025-21377Medium6.522%-Fix
CVE-2024-37149High7.221%-Fix
CVE-2024-0265Medium6.321%--
CVE-2024-0087Critical9.020%-Fix
CVE-2026-20872High6.519%-Fix
CVE-2026-20925High6.517%-Fix
CVE-2023-36019Critical9.616%-Fix
CVE-2026-44127High8.816%--
CVE-2025-0105Critical9.113%-Fix
CVE-2026-21249High3.311%-Fix
CVE-2025-6463High8.811%-Fix
CVE-2022-24900Critical9.98.0%--
CVE-2023-30943Medium6.56.6%-Fix
CVE-2021-24966Medium4.95.2%--
CVE-2020-1631High8.84.7%KEV-
CVE-2025-68478High7.13.6%-Fix
CVE-2022-0246Medium4.93.4%-Fix
CVE-2023-39542High8.83.3%--
CVE-2026-33476High7.53.3%-Fix
CVE-2023-29324Medium6.52.8%-Fix
CVE-2020-2008High7.22.8%--
CVE-2023-35985High8.82.7%--
CVE-2022-2431High8.12.5%--
CVE-2022-32761Medium6.52.4%--
CVE-2014-2375High8.32.3%--
CVE-2022-28710Medium6.52.3%--
CVE-2026-27825Critical9.02.3%-Fix
CVE-2023-36764High8.82.3%-Fix
CVE-2018-7495High7.52.2%-Fix
CVE-2018-14820High7.52.2%--
CVE-2025-59516High7.82.1%-Fix
CVE-2024-20652High8.12.1%-Fix
CVE-2024-5334High7.52.1%--
CVE-2025-68428High7.52.1%-Fix
CVE-2020-6105High7.82.0%-Fix
CVE-2023-40194High8.82.0%--
CVE-2020-2009High7.22.0%--
CVE-2025-0111Medium6.51.9%KEVFix
CVE-2025-59049High7.51.7%--
CVE-2023-46851Medium4.91.6%-Fix
CVE-2023-35384Medium5.41.6%-Fix
CVE-2024-38049Medium6.61.6%-Fix
CVE-2020-25161High8.81.5%-Fix
CVE-2020-15264High8.01.5%-Fix
CVE-2026-26975High8.81.4%-Fix
CVE-2025-46762High8.11.4%-Fix
CVE-2020-26078Medium6.51.4%-Fix
CVE-2020-5296Medium6.21.4%-Fix
CVE-2019-3681High7.51.4%-Fix
CVE-2022-0593Medium6.51.4%-Fix
CVE-2026-33309Critical9.91.4%-Fix
CVE-2024-27944High7.21.4%-Fix
CVE-2026-11526Medium4.21.4%-Fix
CVE-2024-27945High7.21.4%-Fix
CVE-2024-11042Critical9.11.3%--
CVE-2023-49738High7.51.3%--
CVE-2024-38029High7.51.3%-Fix
CVE-2024-43581High7.11.3%-Fix
CVE-2022-20789Medium4.91.3%--
CVE-2024-38657Medium4.91.3%-Fix
CVE-2024-27943High7.21.3%-Fix
CVE-2025-49760Low3.51.3%-Fix
CVE-2024-38165Medium6.51.3%-Fix
CVE-2026-8450Critical9.11.2%-Fix
CVE-2021-3845High7.51.2%-Fix
CVE-2025-24996Medium6.51.2%-Fix
CVE-2020-5297Low3.41.2%-Fix
CVE-2023-0003Medium6.51.2%-Fix
CVE-2023-2152Medium5.31.2%--
CVE-2024-43615High7.11.1%-Fix
CVE-2025-4603Critical9.11.1%--
CVE-2020-9752Critical9.81.1%-Fix
CVE-2018-19945Critical9.11.1%-Fix
CVE-2025-26646High8.01.1%-Fix
CVE-2021-38477Critical9.81.1%-Fix
CVE-2023-49864Medium6.51.1%--
CVE-2023-49863Medium6.51.1%--
CVE-2023-49862Medium6.51.1%--
CVE-2023-47171Medium6.51.1%--
CVE-2023-47862Critical9.81.1%--
CVE-2023-21800High7.81.1%-Fix
CVE-2026-30940High7.21.0%-Fix
CVE-2025-59185High6.51.0%-Fix
CVE-2024-41183High7.81.0%-Fix
CVE-2020-2504Medium5.81.0%-Fix
CVE-2026-4132High7.21.0%--

Showing the top 100 of 473. Browse all 473 in the lookup tool.