Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-113744 |
critical | 10.0 | 0.0062 | 2026-10-21 | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the fu | |
CVE-2026-114382 |
critical | 10.0 | 0.0067 | 2026-10-21 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStat | |
CVE-2026-114383 |
critical | 10.0 | 0.0065 | 2026-10-21 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAd | |
CVE-2026-16367 |
critical | 10.0 | 0.0055 | 2026-07-21 | Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability wa | |
CVE-2026-76008 |
critical | 10.0 | 0.0102 | 2026-08-19 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the | |
CVE-2026-79847 |
critical | 10.0 | 0.0082 | 2026-10-22 | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated re | |
CVE-2026-79851 |
critical | 10.0 | 0.0076 | 2026-10-22 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthe | |
CVE-2026-74987 |
critical | 9.8 | 0.0072 | 2026-08-18 | Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of thes | |
CVE-2026-74988 |
critical | 9.8 | 0.0061 | 2026-08-18 | Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed eviden | |
CVE-2026-74989 |
critical | 9.8 | 0.0057 | 2026-08-18 | Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruptio | |
CVE-2026-74990 |
critical | 9.8 | 0.0072 | 2026-08-18 | Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firef | |
CVE-2026-34159 |
critical | 9.8 | 0.0159 | 2026-04-01 | llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's | |
CVE-2026-4149 |
critical | 9.8 | 0.0100 | 2026-04-11 | Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerabil | |
CVE-2026-14241 |
critical | 9.8 | 0.0043 | 2026-06-30 | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corrupti | |
CVE-2026-20156 |
critical | 9.8 | 0.0046 | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS en | |
CVE-2026-16350 |
critical | 9.8 | 0.0060 | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in F | |
CVE-2026-16357 |
critical | 9.8 | 0.0060 | 2026-07-21 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16360 |
critical | 9.8 | 0.0061 | 2026-07-21 | Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed | |
CVE-2026-16361 |
critical | 9.8 | 0.0057 | 2026-07-21 | Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory c | |
CVE-2026-16368 |
critical | 9.8 | 0.0057 | 2026-07-21 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed | |
CVE-2026-28911 |
critical | 9.8 | 0.0050 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, m | |
CVE-2026-39873 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43682 |
critical | 9.8 | 0.0072 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43694 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-43710 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64695 |
critical | 9.8 | 0.0073 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS | |
CVE-2026-64696 |
critical | 9.8 | 0.0072 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64697 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-64698 |
critical | 9.8 | 0.0059 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-79856 |
critical | 9.8 | 0.0061 | 2026-10-22 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthentic | |
CVE-2026-109708 |
critical | 9.6 | 0.0033 | 2026-10-13 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability | |
CVE-2026-118305 |
critical | 9.6 | 0.0024 | 2026-10-27 | Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to p | |
CVE-2026-118306 |
critical | 9.6 | 0.0024 | 2026-10-27 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to | |
CVE-2026-118312 |
critical | 9.6 | 0.0022 | 2026-10-27 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to pote | |
CVE-2026-118340 |
critical | 9.6 | 0.0022 | 2026-10-27 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to poten | |
CVE-2026-112992 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pot | |
CVE-2026-113007 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113056 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113072 |
critical | 9.6 | 0.0050 | 2026-10-20 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent | |
CVE-2026-113126 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113138 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacke | |
CVE-2026-113169 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a | |
CVE-2026-113171 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote | |
CVE-2026-113186 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e | |
CVE-2026-113211 |
critical | 9.6 | 0.0045 | 2026-10-20 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113283 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowe | |
CVE-2026-113336 |
critical | 9.6 | 0.0050 | 2026-10-20 | Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113342 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-114268 |
critical | 9.4 | 0.0051 | 2026-10-21 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function | |
CVE-2026-116508 |
critical | 9.3 | 0.0061 | 2026-10-26 | A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issu |