Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-62688 |
high | 7.8 | 0.0033 | 2026-08-11 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p | |
CVE-2026-18296 |
high | 7.8 | 0.0023 | 2026-08-20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vuln | |
CVE-2026-18298 |
high | 7.8 | 0.0022 | 2026-08-20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vuln | |
CVE-2026-18302 |
high | 7.8 | 0.0039 | 2026-08-20 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-18307 |
high | 7.8 | 0.0042 | 2026-08-20 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-95638 |
high | 7.8 | 0.0023 | 2026-10-13 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arb | |
CVE-2026-57197 |
high | 7.7 | 0.0053 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-32623 |
high | 7.7 | 0.0054 | 2026-04-17 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vuln | |
CVE-2026-20185 |
high | 7.7 | 0.0039 | 2026-05-06 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series | |
CVE-2026-53994 |
high | 7.7 | 0.0045 | 2026-07-18 | ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The | |
CVE-2026-63633 |
high | 7.7 | 0.0062 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_dsp_decode | |
CVE-2023-52356 |
high | 7.5 | 0.0251 | 2024-01-25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff f | |
CVE-2026-100208 |
high | 7.5 | 0.0045 | 2026-09-25 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut | |
CVE-2026-69789 |
high | 7.5 | 0.0046 | 2026-10-13 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at | |
CVE-2026-70207 |
high | 7.5 | 0.0075 | 2026-10-13 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute c | |
CVE-2026-83795 |
high | 7.5 | 0.0127 | 2026-10-13 | Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service | |
CVE-2026-109089 |
high | 7.5 | 0.0026 | 2026-10-27 | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, trigg | |
CVE-2026-109090 |
high | 7.5 | 0.0026 | 2026-10-27 | A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when proce | |
CVE-2026-47235 |
high | 7.5 | 0.0015 | 2026-10-28 | SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release- | |
CVE-2026-61363 |
high | 7.5 | 0.0068 | 2026-08-11 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code | |
CVE-2026-50330 |
high | 7.5 | 0.0125 | 2026-07-14 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privi | |
CVE-2026-50696 |
high | 7.5 | 0.0117 | 2026-07-14 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized at | |
CVE-2026-59134 |
high | 7.5 | 0.0068 | 2026-08-11 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code | |
CVE-2026-88207 |
high | 7.5 | 0.0059 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute | |
CVE-2026-96071 |
high | 7.5 | 0.0063 | 2026-10-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n | |
CVE-2026-105592 |
high | 7.5 | 0.0061 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod | |
CVE-2026-105599 |
high | 7.5 | 0.0062 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute | |
CVE-2026-105714 |
high | 7.5 | 0.0061 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod | |
CVE-2026-108448 |
high | 7.5 | 0.0048 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co | |
CVE-2026-70031 |
high | 7.5 | 0.0127 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n | |
CVE-2026-70095 |
high | 7.5 | 0.0063 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n | |
CVE-2026-83754 |
high | 7.5 | 0.0068 | 2026-10-13 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov | |
CVE-2026-87716 |
high | 7.5 | 0.0112 | 2026-10-13 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d | |
CVE-2026-32316 |
high | 7.5 | 0.0079 | 2026-04-13 | jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 | |
CVE-2026-7040 |
high | 7.5 | 0.0044 | 2026-04-27 | Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some | |
CVE-2026-23827 |
high | 7.5 | 0.0053 | 2026-05-12 | A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-1 | |
CVE-2026-12844 |
high | 7.5 | 0.0066 | 2026-06-25 | List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise functi | |
CVE-2026-15169 |
high | 7.5 | 0.0027 | 2026-07-08 | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of se | |
CVE-2026-47471 |
high | 7.5 | 0.0031 | 2026-07-14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an at | |
CVE-2026-40691 |
high | 7.5 | 0.0029 | 2026-07-22 | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine | |
CVE-2026-10849 |
high | 7.5 | 0.0051 | 2026-08-03 | The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response | |
CVE-2026-67867 |
high | 7.5 | 0.0054 | 2026-08-05 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of | |
CVE-2026-34501 |
high | 7.5 | 0.0051 | 2026-08-06 | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issu | |
CVE-2026-34502 |
high | 7.5 | 0.0051 | 2026-08-06 | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This i | |
CVE-2026-19156 |
high | 7.5 | 0.0025 | 2026-08-06 | Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convin | |
CVE-2026-16928 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-9536 |
high | 7.5 | — | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets func | |
CVE-2026-52834 |
high | 7.3 | 0.0017 | 2026-08-19 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a cr | |
CVE-2026-49790 |
high | 7.3 | 0.0036 | 2026-07-14 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | |
CVE-2026-50482 |
high | 7.3 | 0.0036 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |