Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-58640 |
high | 7.3 | 0.0036 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | |
CVE-2026-32149 |
high | 7.3 | 0.0032 | 2026-04-14 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. | |
CVE-2024-50571 |
high | 7.2 | 0.0054 | 2025-10-14 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnaly | |
CVE-2026-108399 |
high | 7.2 | 0.0038 | 2026-10-13 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo | |
CVE-2026-85798 |
high | 7.2 | 0.0087 | 2026-10-13 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to | |
CVE-2026-29004 |
high | 7.2 | 0.0037 | 2026-05-04 | BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (ud | |
CVE-2026-0264 |
high | 7.2 | 0.0047 | 2026-05-13 | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-O | |
CVE-2025-71436 |
high | 7.1 | 0.0050 | 2026-10-20 | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerabi | |
CVE-2026-85856 |
high | 7.1 | 0.0036 | 2026-10-13 | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacke | |
CVE-2026-56789 |
high | 7.1 | 0.0042 | 2026-06-25 | RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in sr | |
CVE-2026-15506 |
high | 7.1 | 0.0020 | 2026-07-12 | A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected elemen | |
CVE-2026-54715 |
high | 7.1 | 0.0044 | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix syst | |
CVE-2026-18497 |
high | 7.1 | 0.0018 | 2026-08-07 | A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26 | |
CVE-2026-74045 |
high | 7.1 | 0.0034 | 2026-10-13 | Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_l | |
CVE-2026-16118 |
high | 7.1 | 0.0022 | 2026-07-17 | A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_ | |
CVE-2026-103555 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker | |
CVE-2026-109453 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker | |
CVE-2026-83827 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate | |
CVE-2026-88110 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privi | |
CVE-2026-111379 |
high | 7.0 | 0.0019 | 2026-10-16 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v | |
CVE-2026-116776 |
high | 7.0 | 0.0018 | 2026-10-28 | USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overrepor | |
CVE-2026-50372 |
high | 7.0 | 0.0026 | 2026-07-14 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate priv | |
CVE-2026-50472 |
high | 7.0 | 0.0026 | 2026-08-11 | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges loca | |
CVE-2026-62753 |
high | 7.0 | 0.0026 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l | |
CVE-2026-111381 |
high | 7.0 | 0.0018 | 2026-10-16 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v | |
CVE-2026-100201 |
high | 7.0 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevat | |
CVE-2026-100203 |
high | 7.0 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil | |
CVE-2026-100225 |
high | 7.0 | 0.0029 | 2026-10-13 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo | |
CVE-2026-102189 |
high | 7.0 | 0.0029 | 2026-10-13 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo | |
CVE-2026-102191 |
high | 7.0 | 0.0029 | 2026-10-13 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo | |
CVE-2026-102209 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate | |
CVE-2026-85919 |
high | 7.0 | 0.0024 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally | |
CVE-2026-88082 |
high | 7.0 | 0.0024 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally | |
CVE-2026-97810 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a | |
CVE-2026-69970 |
high | 7.0 | 0.0027 | 2026-10-13 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p | |
CVE-2026-83580 |
high | 7.0 | 0.0033 | 2026-10-13 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke | |
CVE-2026-83676 |
high | 7.0 | 0.0029 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-83680 |
high | 7.0 | 0.0026 | 2026-10-13 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges | |
CVE-2026-83724 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el | |
CVE-2026-83750 |
high | 7.0 | 0.0023 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized at | |
CVE-2026-83775 |
high | 7.0 | 0.0024 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-83871 |
high | 7.0 | 0.0022 | 2026-10-13 | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege | |
CVE-2026-83911 |
high | 7.0 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo | |
CVE-2026-83921 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el | |
CVE-2026-84014 |
high | 7.0 | 0.0022 | 2026-10-13 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el | |
CVE-2026-85365 |
high | 7.0 | 0.0020 | 2026-10-13 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi | |
CVE-2026-85791 |
high | 7.0 | 0.0028 | 2026-10-13 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to | |
CVE-2026-85827 |
high | 7.0 | 0.0020 | 2026-10-13 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85828 |
high | 7.0 | 0.0025 | 2026-10-13 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85834 |
high | 7.0 | 0.0025 | 2026-10-13 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc |