Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-34865 |
critical | 10.0 | 0.0021 | 2026-04-13 | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerab | |
CVE-2026-46752 |
critical | 10.0 | 0.0048 | 2026-06-25 | Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache | |
CVE-2026-58081 |
critical | 9.8 | 0.0052 | 2026-08-19 | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the | |
CVE-2026-70147 |
critical | 9.8 | 0.0107 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to | |
CVE-2026-70153 |
critical | 9.8 | 0.0107 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to | |
CVE-2026-70157 |
critical | 9.8 | 0.0106 | 2026-10-13 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to | |
CVE-2026-85928 |
critical | 9.8 | 0.0063 | 2026-10-13 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke | |
CVE-2026-76939 |
critical | 9.8 | 0.0052 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affec | |
CVE-2026-82120 |
critical | 9.8 | 0.0036 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: fro | |
CVE-2026-86574 |
critical | 9.8 | 0.0052 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 befor | |
CVE-2026-65791 |
critical | 9.8 | 0.0097 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut | |
CVE-2026-42990 |
critical | 9.8 | 0.0097 | 2026-07-14 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code | |
CVE-2026-49172 |
critical | 9.8 | 0.0097 | 2026-07-14 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code ov | |
CVE-2026-50447 |
critical | 9.8 | 0.0097 | 2026-07-14 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod | |
CVE-2026-50518 |
critical | 9.8 | 0.0097 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov | |
CVE-2026-54990 |
critical | 9.8 | 0.0082 | 2026-07-14 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code | |
CVE-2026-55010 |
critical | 9.8 | 0.0097 | 2026-07-14 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to | |
CVE-2026-56159 |
critical | 9.8 | 0.0097 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov | |
CVE-2026-56165 |
critical | 9.8 | 0.0097 | 2026-07-23 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over | |
CVE-2026-100222 |
critical | 9.8 | 0.0106 | 2026-10-13 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute | |
CVE-2026-102210 |
critical | 9.8 | 0.0099 | 2026-10-13 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o | |
CVE-2026-105016 |
critical | 9.8 | 0.0166 | 2026-10-13 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a | |
CVE-2026-70242 |
critical | 9.8 | 0.0157 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co | |
CVE-2026-96113 |
critical | 9.8 | 0.0087 | 2026-10-13 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a netw | |
CVE-2026-96320 |
critical | 9.8 | 0.0105 | 2026-10-13 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov | |
CVE-2026-96909 |
critical | 9.8 | 0.0099 | 2026-10-13 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over | |
CVE-2026-97814 |
critical | 9.8 | 0.0109 | 2026-10-13 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o | |
CVE-2026-97815 |
critical | 9.8 | 0.0087 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod | |
CVE-2026-69634 |
critical | 9.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n | |
CVE-2026-69639 |
critical | 9.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove | |
CVE-2026-69886 |
critical | 9.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c | |
CVE-2026-70096 |
critical | 9.8 | 0.0109 | 2026-10-13 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec | |
CVE-2026-70291 |
critical | 9.8 | 0.0133 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co | |
CVE-2026-83517 |
critical | 9.8 | 0.0108 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to | |
CVE-2026-83519 |
critical | 9.8 | 0.0108 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod | |
CVE-2026-83523 |
critical | 9.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute c | |
CVE-2026-83578 |
critical | 9.8 | 0.0109 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec | |
CVE-2026-83693 |
critical | 9.8 | 0.0113 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod | |
CVE-2026-83748 |
critical | 9.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod | |
CVE-2026-83770 |
critical | 9.8 | 0.0113 | 2026-10-13 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o | |
CVE-2026-83782 |
critical | 9.8 | 0.0101 | 2026-10-13 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n | |
CVE-2026-83935 |
critical | 9.8 | 0.0090 | 2026-10-13 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n | |
CVE-2026-84015 |
critical | 9.8 | 0.0087 | 2026-10-13 | Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthor | |
CVE-2026-85809 |
critical | 9.8 | 0.0093 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-85814 |
critical | 9.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to | |
CVE-2026-96096 |
critical | 9.8 | 0.0066 | 2026-10-13 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o | |
CVE-2026-97016 |
critical | 9.8 | 0.0117 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co | |
CVE-2026-25205 |
critical | 9.8 | 0.0019 | 2026-04-13 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write. | |
CVE-2026-13473 |
critical | 9.8 | 0.0067 | 2026-07-17 | IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Stora | |
CVE-2026-63886 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate C |