Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-28902 |
— | — | 0.0039 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 | |
CVE-2026-28903 |
— | — | 0.0039 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7. | |
CVE-2026-28904 |
— | — | 0.0041 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7. | |
CVE-2026-28905 |
— | — | 0.0041 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 | |
CVE-2026-28953 |
— | — | 0.0041 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7. | |
CVE-2026-28955 |
— | — | 0.0069 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7. | |
CVE-2026-43658 |
— | — | 0.0032 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7. | |
CVE-2026-8388 |
— | — | 0.0024 | 2026-05-12 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed | |
CVE-2026-8389 |
— | — | 0.0042 | 2026-05-12 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox | |
CVE-2026-8391 |
— | — | 0.0030 | 2026-05-12 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-12290 |
— | — | 0.0040 | 2026-06-16 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR | |
CVE-2026-12292 |
— | — | 0.0049 | 2026-06-16 | Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-12297 |
— | — | 0.0039 | 2026-06-16 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability | |
CVE-2026-12326 |
— | — | 0.0036 | 2026-06-16 | Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of | |
CVE-2026-12329 |
— | — | 0.0031 | 2026-06-16 | Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.1 | |
CVE-2026-8452 |
— | — | 0.0101 | — | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the | KEV |
CVE-2026-64758 |
— | — | 0.0017 | 2026-07-27 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6 | |
CVE-2026-43794 |
— | — | 0.0042 | 2026-08-17 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari | |
CVE-2026-43795 |
— | — | 0.0058 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18. | |
CVE-2026-64780 |
— | — | 0.0063 | 2026-08-17 | The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and | |
CVE-2026-64788 |
— | — | 0.0025 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS | |
CVE-2026-65330 |
— | — | 0.0045 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS | |
CVE-2026-65333 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-65334 |
— | — | 0.0046 | 2026-08-17 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safar | |
CVE-2026-65335 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-65338 |
— | — | 0.0046 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18. | |
CVE-2026-65341 |
— | — | 0.0024 | 2026-08-17 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18. | |
CVE-2026-28935 |
— | — | 0.0049 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS | |
CVE-2026-43702 |
— | — | 0.0015 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26 | |
CVE-2026-64714 |
— | — | 0.0018 | 2026-09-14 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18 | |
CVE-2026-84537 |
— | — | 0.0016 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, | |
CVE-2026-84566 |
— | — | 0.0017 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26 | |
CVE-2026-84567 |
— | — | 0.0016 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, | |
CVE-2026-88772 |
— | — | 0.7816 | — | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the | KEV |
CVE-2026-88779 |
— | — | 0.1139 | — | Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) co | KEV |
CVE-2026-65396 |
— | — | 0.0017 | 2026-10-20 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden G | |
CVE-2008-4250 |
— | — | 0.9875 | — | Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows | KEV |
CVE-2008-0015 |
— | — | 0.7658 | — | Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker | KEV |
CVE-2009-3459 |
— | — | 0.8665 | — | Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote | KEV |
CVE-2010-3765 |
— | — | 0.8316 | — | Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is | KEV |
CVE-2011-1889 |
— | — | 0.4902 | — | A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewa | KEV |
CVE-2012-2034 |
— | — | 0.0771 | — | Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution | KEV |
CVE-2013-3660 |
— | — | 0.3932 | — | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not | KEV |
CVE-2013-1690 |
— | — | 0.6902 | — | Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with | KEV |