Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2025-60553 |
critical | 9.8 | 0.0041 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i | |
CVE-2026-17040 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2023-24482 |
critical | 9.8 | 0.0081 | 2023-02-14 | A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V | |
CVE-2026-5734 |
critical | 9.8 | 0.0033 | 2026-04-07 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thun | |
CVE-2026-0126 |
critical | 9.8 | 0.0028 | 2026-06-16 | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead | |
CVE-2026-51380 |
critical | 9.8 | 0.0050 | 2026-07-15 | Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a p | |
CVE-2026-63887 |
critical | 9.8 | 0.0078 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscs | |
CVE-2026-43750 |
critical | 9.8 | 0.0077 | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-64691 |
critical | 9.8 | 0.0047 | 2026-07-27 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26 | |
CVE-2026-64767 |
critical | 9.8 | 0.0089 | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-7321 |
critical | 9.6 | 0.0026 | 2026-04-28 | Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulner | |
CVE-2026-97631 |
critical | 9.5 | 0.0048 | 2026-10-22 | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer O | |
CVE-2026-114268 |
critical | 9.4 | 0.0051 | 2026-10-21 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function | |
CVE-2026-71957 |
critical | 9.3 | 0.0107 | 2026-08-08 | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain | |
CVE-2026-71958 |
critical | 9.3 | 0.0107 | 2026-08-08 | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain | |
CVE-2026-93857 |
critical | 9.2 | 0.0047 | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthentica | |
CVE-2026-16364 |
critical | 9.1 | 0.0043 | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed i | |
CVE-2026-7248 |
high | 8.9 | 0.0215 | 2026-04-28 | A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the | |
CVE-2026-7719 |
high | 8.9 | 0.0062 | 2026-05-04 | A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is | |
CVE-2026-7747 |
high | 8.9 | 0.0061 | 2026-05-04 | A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerabili | |
CVE-2026-83596 |
high | 8.8 | 0.0032 | 2026-08-31 | A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to i | |
CVE-2026-5279 |
high | 8.8 | 0.0042 | 2026-04-01 | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execut | |
CVE-2026-49759 |
high | 8.8 | 0.0050 | 2026-06-10 | Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated re | |
CVE-2026-0146 |
high | 8.8 | 0.0028 | 2026-06-16 | In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write | |
CVE-2026-0147 |
high | 8.8 | 0.0028 | 2026-06-16 | In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds | |
CVE-2026-0154 |
high | 8.8 | 0.0023 | 2026-06-16 | In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory | |
CVE-2026-0160 |
high | 8.8 | 0.0023 | 2026-06-16 | In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out o | |
CVE-2026-0164 |
high | 8.8 | 0.0023 | 2026-06-16 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to | |
CVE-2026-7300 |
high | 8.8 | 0.0025 | 2026-06-17 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext | |
CVE-2026-29009 |
high | 8.8 | 0.0074 | 2026-07-08 | U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs- | |
CVE-2026-44880 |
high | 8.8 | 0.0075 | 2026-07-21 | A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploi | |
CVE-2026-19002 |
high | 8.8 | 0.0040 | 2026-08-12 | A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector | |
CVE-2026-18279 |
high | 8.8 | 0.0069 | 2026-08-20 | Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability a | |
CVE-2026-82944 |
high | 8.8 | 0.0021 | 2026-10-26 | SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a mali | |
CVE-2026-7607 |
high | 8.7 | 0.0063 | 2026-05-02 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function | |
CVE-2026-7674 |
high | 8.7 | 0.0048 | 2026-05-03 | A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects th | |
CVE-2026-40067 |
high | 8.7 | 0.0032 | 2026-05-13 | When a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the | |
CVE-2026-15483 |
high | 8.7 | 0.0057 | 2026-07-12 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function | |
CVE-2026-15484 |
high | 8.7 | 0.0079 | 2026-07-12 | A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function su | |
CVE-2026-0993 |
high | 8.7 | 0.0039 | 2026-10-15 | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allow | |
CVE-2026-6691 |
high | 8.6 | 0.0013 | 2026-05-06 | The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonic | |
CVE-2019-25733 |
high | 8.6 | — | 2026-06-04 | NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that a | |
CVE-2025-53966 |
high | 8.4 | 0.0016 | 2026-01-05 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Han | |
CVE-2026-42450 |
high | 8.4 | 0.0018 | 2026-06-24 | OpenColorIO is a color management framework for visual effects and animation. Prior to version 2.5.2 | |
CVE-2026-11885 |
high | 8.4 | 0.0015 | 2026-07-30 | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 throug | |
CVE-2026-57273 |
high | 8.3 | 0.0040 | 2026-07-02 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is | |
CVE-2026-57274 |
high | 8.3 | 0.0040 | 2026-07-02 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is | |
CVE-2026-57275 |
high | 8.3 | 0.0040 | 2026-07-02 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is | |
CVE-2026-57276 |
high | 8.3 | 0.0040 | 2026-07-02 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is | |
CVE-2026-57277 |
high | 8.3 | 0.0040 | 2026-07-02 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is |