Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-10709 |
high | 7.8 | 0.0021 | 2026-08-04 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buff | |
CVE-2026-10710 |
high | 7.8 | 0.0021 | 2026-08-04 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buff | |
CVE-2026-71266 |
high | 7.8 | 0.0017 | 2026-08-05 | tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl ma | |
CVE-2026-18297 |
high | 7.8 | 0.0024 | 2026-08-20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vul | |
CVE-2026-18303 |
high | 7.8 | 0.0039 | 2026-08-20 | GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerab | |
CVE-2026-16945 |
high | 7.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-93888 |
high | 7.8 | 0.0021 | 2026-10-20 | IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify ut | |
CVE-2026-92183 |
high | 7.8 | 0.0043 | 2026-10-21 | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnera | |
CVE-2026-107894 |
high | 7.8 | 0.0014 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Open | |
CVE-2026-48715 |
high | 7.7 | 0.0033 | 2026-06-19 | radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipp | |
CVE-2026-6687 |
high | 7.6 | 0.0035 | 2026-07-01 | FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XD | |
CVE-2026-115863 |
high | 7.6 | 0.0030 | 2026-10-23 | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get | |
CVE-2025-60751 |
high | 7.5 | 0.0228 | 2025-10-21 | GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. | |
CVE-2025-60570 |
high | 7.5 | 0.0046 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i | |
CVE-2025-60549 |
high | 7.5 | 0.0037 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i | |
CVE-2025-60550 |
high | 7.5 | 0.0037 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i | |
CVE-2025-60552 |
high | 7.5 | 0.0037 | 2025-10-24 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i | |
CVE-2025-61498 |
high | 7.5 | 0.0038 | 2025-10-30 | A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a | |
CVE-2025-63462 |
high | 7.5 | 0.0041 | 2025-10-31 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff pa | |
CVE-2025-63464 |
high | 7.5 | 0.0041 | 2025-10-31 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parame | |
CVE-2025-63465 |
high | 7.5 | 0.0041 | 2025-10-31 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parame | |
CVE-2026-50527 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a | |
CVE-2026-50304 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker | |
CVE-2026-50355 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker | |
CVE-2026-50368 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker | |
CVE-2026-50411 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a | |
CVE-2026-50695 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker | |
CVE-2026-54983 |
high | 7.5 | 0.0117 | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a | |
CVE-2026-88083 |
high | 7.5 | 0.0050 | 2026-10-13 | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a net | |
CVE-2026-83860 |
high | 7.5 | 0.0127 | 2026-10-13 | Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a ne | |
CVE-2026-96185 |
high | 7.5 | 0.0054 | 2026-10-22 | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute co | |
CVE-2026-96248 |
high | 7.5 | 0.0112 | 2026-10-13 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny | |
CVE-2024-26010 |
high | 7.5 | 0.0079 | 2024-06-11 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 t | |
CVE-2025-65805 |
high | 7.5 | 0.0038 | 2026-01-07 | OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Un | |
CVE-2026-4156 |
high | 7.5 | 0.0043 | 2026-04-11 | ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. | |
CVE-2026-36837 |
high | 7.5 | 0.0031 | 2026-04-29 | TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow | |
CVE-2026-5654 |
high | 7.5 | 0.0021 | 2026-04-30 | AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | |
CVE-2026-28846 |
high | 7.5 | 0.0073 | 2026-05-11 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and | |
CVE-2026-28848 |
high | 7.5 | 0.0054 | 2026-05-11 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-43661 |
high | 7.5 | 0.0126 | 2026-05-11 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7 | |
CVE-2025-28343 |
high | 7.5 | 0.0038 | 2026-05-13 | striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons. | |
CVE-2025-28344 |
high | 7.5 | 0.0033 | 2026-05-13 | striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. | |
CVE-2026-41565 |
high | 7.5 | 0.0047 | 2026-05-28 | CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify h | |
CVE-2026-52190 |
high | 7.5 | 0.0052 | 2026-07-01 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-51602 |
high | 7.5 | 0.0046 | 2026-07-09 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9. | |
CVE-2026-51603 |
high | 7.5 | 0.0046 | 2026-07-09 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9. | |
CVE-2026-51604 |
high | 7.5 | 0.0047 | 2026-07-09 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9. | |
CVE-2026-51605 |
high | 7.5 | 0.0047 | 2026-07-09 | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9. | |
CVE-2026-55687 |
high | 7.5 | 0.0070 | 2026-07-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4. | |
CVE-2026-51105 |
high | 7.5 | 0.0037 | 2026-07-14 | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a den |