Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-97761 |
high | 8.8 | 0.0082 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod | |
CVE-2026-97770 |
high | 8.8 | 0.0074 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod | |
CVE-2026-41429 |
high | 8.8 | 0.0031 | 2026-04-24 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 | |
CVE-2026-49759 |
high | 8.8 | 0.0050 | 2026-06-10 | Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated re | |
CVE-2026-7273 |
high | 8.8 | 0.0278 | 2026-06-16 | Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program | KEV |
CVE-2026-25268 |
high | 8.8 | 0.0011 | 2026-07-06 | Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching oper | |
CVE-2026-16418 |
high | 8.8 | 0.0045 | 2026-07-21 | Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to ex | |
CVE-2026-13361 |
high | 8.8 | 0.0049 | 2026-08-12 | IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field. | |
CVE-2026-16877 |
high | 8.8 | 0.0075 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute | |
CVE-2026-16911 |
high | 8.8 | 0.0075 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute | |
CVE-2026-62706 |
high | 8.8 | 0.0082 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute | |
CVE-2026-76587 |
high | 8.8 | 0.0066 | 2026-10-20 | IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improp | |
CVE-2026-116738 |
high | 8.7 | 0.0073 | 2026-10-26 | VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remo | |
CVE-2026-4682 |
high | 8.7 | 0.0030 | 2026-04-15 | Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer | |
CVE-2026-32955 |
high | 8.7 | 0.0062 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vu | |
CVE-2026-41956 |
high | 8.7 | 0.0026 | 2026-05-13 | When a classification profile is configured on a UDP virtual server, undisclosed requests can cause | |
CVE-2026-55738 |
high | 8.7 | 0.0040 | 2026-06-17 | A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar | |
CVE-2026-16096 |
high | 8.7 | 0.0054 | 2026-07-18 | A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the funct | |
CVE-2026-16097 |
high | 8.7 | 0.0079 | 2026-07-18 | A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C | |
CVE-2026-64831 |
high | 8.7 | 0.0085 | 2026-07-22 | FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC | |
CVE-2026-50039 |
high | 8.7 | 0.0046 | 2026-07-23 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to | |
CVE-2026-12935 |
high | 8.7 | 0.0099 | 2026-07-29 | The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lea | |
CVE-2026-67248 |
high | 8.7 | 0.0049 | 2026-07-30 | A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerabi | |
CVE-2026-71979 |
high | 8.7 | 0.0058 | 2026-08-17 | INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commit 96bbd7f, | |
CVE-2026-73522 |
high | 8.7 | 0.0395 | 2026-08-17 | COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthentic | |
CVE-2026-90442 |
high | 8.6 | 0.0021 | 2026-10-27 | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated | |
CVE-2026-40489 |
high | 8.6 | 0.0015 | 2026-04-18 | editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig pars | |
CVE-2026-6643 |
high | 8.6 | 0.0047 | 2026-04-20 | A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems | |
CVE-2026-9038 |
high | 8.6 | 0.0023 | 2026-05-28 | A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic all | |
CVE-2026-56766 |
high | 8.6 | 0.0244 | 2026-06-25 | Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication | |
CVE-2026-75783 |
high | 8.6 | 0.0060 | 2026-08-18 | A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulner | |
CVE-2026-75877 |
high | 8.6 | 0.0085 | 2026-08-18 | A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function Syst | |
CVE-2026-75976 |
high | 8.6 | 0.0085 | 2026-08-19 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of | |
CVE-2026-76003 |
high | 8.6 | 0.0079 | 2026-08-19 | A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strc | |
CVE-2026-76004 |
high | 8.6 | 0.0079 | 2026-08-19 | A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected b | |
CVE-2026-116723 |
high | 8.5 | 0.0016 | 2026-10-26 | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() | |
CVE-2026-75142 |
high | 8.5 | 0.0020 | 2026-08-19 | FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpeg | |
CVE-2026-32925 |
high | 8.4 | 0.0021 | 2026-04-01 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::Wr | |
CVE-2026-32928 |
high | 8.4 | 0.0021 | 2026-04-01 | V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_co | |
CVE-2026-35553 |
high | 8.4 | 0.0015 | 2026-04-13 | Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability | |
CVE-2026-49033 |
high | 8.4 | 0.0018 | 2026-07-07 | The application contains a stack-based buffer overflow vulnerability that can be exploited by an att | |
CVE-2026-21068 |
high | 8.4 | 0.0017 | 2026-08-10 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local | |
CVE-2026-19003 |
high | 8.4 | 0.0021 | 2026-08-12 | A data source definition containing an over-length file path setting may cause the MongoDB BI Connec | |
CVE-2026-41927 |
high | 8.3 | 0.0040 | 2026-05-04 | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulner | |
CVE-2026-62349 |
high | 8.3 | 0.0050 | 2026-07-15 | TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1. | |
CVE-2026-62792 |
high | 8.1 | 0.0071 | 2026-08-11 | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a | |
CVE-2026-70571 |
high | 8.1 | 0.0139 | 2026-10-13 | Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute | |
CVE-2026-40892 |
high | 8.1 | 0.0042 | 2026-04-21 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, | |
CVE-2026-71407 |
high | 8.1 | 0.0051 | 2026-08-12 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 throug | |
CVE-2026-118603 |
high | 8.0 | 0.0024 | 2026-10-28 | Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This |