CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

We have discovered 1,588,414 live websites that are affected by CWE-835.

Available Reports

Website List

CVEs

Count - 16

CWE References

cwe.mitre.org

Website Distribution by Country

Number of websites using CWE-835

United States	435,757 websites

Germany	253,307 websites
France	101,843 websites
Netherlands	83,308 websites
Japan	61,729 websites
Czech Republic	52,291 websites
Italy	50,392 websites
Russia	47,840 websites
GB	39,987 websites
Singapore	35,349 websites

Website Distribution by TLD

Number of websites using CWE-835

.com	546,660 websites
.de	156,972 websites
.org	77,055 websites
.net	63,921 websites
.nl	63,830 websites
.it	45,280 websites
.cz	44,206 websites
.ru	42,118 websites
.fr	34,080 websites
.pl	27,002 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-835

Discovered	CVE	Description	Websites
Aug, 2026	CVE-2026-71436	Mermaid XY Charts are vulnerable to an infinite loop DoS	487
Jul, 2026	CVE-2026-45820	fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A craft...	89
Jul, 2026	CVE-2026-62642	In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TN...	7,956
Jul, 2026	CVE-2026-59877	protobufjs: Denial of Service via infinite loop in .proto option parsing	29
Jun, 2026	CVE-2026-44186	Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp	1,577,765
May, 2026	CVE-2026-41150	Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS	1,214
Mar, 2026	CVE-2026-33891	Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input	373
Jan, 2026	CVE-2025-69227	AIOHTTP vulnerable to DoS when bypassing asserts	240
Jul, 2025	CVE-2025-8194	Tarfile infinite loop during parsing with negative member offset	375
Apr, 2025	CVE-2025-32947	PeerTube ActivityPub Crawl Infinite Loop DoS	123

The most widespread CVEs

List of the most common CVEs that are part of CWE-835

Discovered	CVE	Description	Websites
Jun, 2026	CVE-2026-44186	Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp	1,577,765
Jul, 2026	CVE-2026-62642	In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TN...	7,956
May, 2026	CVE-2026-41150	Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS	1,214
Dec, 2024	CVE-2024-11941	Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001	1,078
Feb, 2024	CVE-2024-25144	The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Life...	510
Aug, 2026	CVE-2026-71436	Mermaid XY Charts are vulnerable to an infinite loop DoS	487
Feb, 2022	CVE-2022-23641	Denial of Service in Discourse	393
Jul, 2025	CVE-2025-8194	Tarfile infinite loop during parsing with negative member offset	375
Mar, 2026	CVE-2026-33891	Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input	373
Aug, 2024	CVE-2024-8088	Infinite loop when iterating over zip archive entry names from zipfile.Path	294

Websites affected by CWE-835

Top websites that are affected by CWE-835. Please click on the "Contact us" link to get more information.

Domain	Country	Rank
***********..*..**********.net	United States	***
*********.net	United States	***
****************.net	United States	,**
*****.cz	Czech Republic	,**
*.**.us	United States	,**
*.*******.com	Singapore	,**
***.*****.com	Singapore	,**
******.net	Sweden	,**
******************.com	United States	,**
*****..com	United States	,**

See full domain list