Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-85870 |
high | 7.0 | 0.0033 | 2026-10-13 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to | |
CVE-2026-85943 |
high | 7.0 | 0.0022 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al | |
CVE-2026-96868 |
high | 7.0 | 0.0025 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc | |
CVE-2026-32087 |
high | 7.0 | 0.0025 | 2026-04-14 | Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker t | |
CVE-2026-32093 |
high | 7.0 | 0.0112 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Funct | |
CVE-2026-116488 |
high | 7.0 | 0.0037 | 2026-10-26 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer over | |
CVE-2026-32961 |
medium | 6.9 | 0.0057 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vul | |
CVE-2026-41509 |
medium | 6.9 | 0.0034 | 2026-05-08 | CROSS implementation contains reference and optimized implementations of the CROSS post-quantum sign | |
CVE-2026-75619 |
medium | 6.9 | 0.0042 | 2026-08-19 | Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authen | |
CVE-2026-96863 |
medium | 6.8 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate | |
CVE-2026-118611 |
medium | 6.8 | 0.0030 | 2026-10-28 | Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vuln | |
CVE-2026-50299 |
medium | 6.8 | 0.0044 | 2026-07-14 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to e | |
CVE-2026-50492 |
medium | 6.8 | 0.0044 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker t | |
CVE-2026-50668 |
medium | 6.8 | 0.0044 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges wit | |
CVE-2026-54132 |
medium | 6.8 | 0.0044 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges w | |
CVE-2026-62699 |
medium | 6.8 | 0.0044 | 2026-08-11 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author | |
CVE-2026-102206 |
medium | 6.8 | 0.0048 | 2026-10-13 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to | |
CVE-2026-69947 |
medium | 6.8 | 0.0050 | 2026-10-13 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code | |
CVE-2026-69958 |
medium | 6.8 | 0.0050 | 2026-10-13 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code | |
CVE-2026-83895 |
medium | 6.8 | 0.0050 | 2026-10-13 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elev | |
CVE-2026-13307 |
medium | 6.8 | 0.0034 | 2026-07-29 | Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerabilit | |
CVE-2026-88143 |
medium | 6.7 | 0.0024 | 2026-10-13 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele | |
CVE-2026-62769 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-62881 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-62883 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-65797 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-65799 |
medium | 6.7 | 0.0034 | 2026-08-11 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges lo | |
CVE-2026-70304 |
medium | 6.7 | 0.0034 | 2026-08-11 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall | |
CVE-2026-70330 |
medium | 6.7 | 0.0034 | 2026-08-11 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall | |
CVE-2026-88089 |
medium | 6.7 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |
CVE-2026-96938 |
medium | 6.7 | 0.0037 | 2026-10-13 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to | |
CVE-2026-70189 |
medium | 6.7 | 0.0033 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |
CVE-2026-48065 |
medium | 6.7 | 0.0015 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, s | |
CVE-2026-20462 |
medium | 6.7 | 0.0016 | 2026-07-01 | In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead t | |
CVE-2026-49804 |
medium | 6.6 | 0.0048 | 2026-07-14 | Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate pr | |
CVE-2026-50678 |
medium | 6.6 | 0.0047 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-69635 |
medium | 6.6 | 0.0047 | 2026-10-13 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges | |
CVE-2026-83945 |
medium | 6.6 | 0.0056 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ | |
CVE-2026-91767 |
medium | 6.5 | 0.0011 | 2026-09-25 | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to | |
CVE-2026-112395 |
medium | 6.5 | 0.0051 | 2026-10-19 | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read pa | |
CVE-2026-97813 |
medium | 6.5 | 0.0108 | 2026-10-13 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information | |
CVE-2026-97817 |
medium | 6.5 | 0.0108 | 2026-10-13 | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over | |
CVE-2026-88085 |
medium | 6.4 | 0.0025 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally | |
CVE-2026-102484 |
medium | 6.4 | 0.0021 | 2026-10-21 | Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker | |
CVE-2026-32624 |
medium | 6.3 | 0.0041 | 2026-04-17 | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vuln | |
CVE-2026-58306 |
medium | 6.1 | 0.0016 | 2026-07-09 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. T | |
CVE-2026-110837 |
medium | 6.1 | 0.0037 | 2026-10-14 | FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based | |
CVE-2026-109256 |
medium | 6.0 | 0.0031 | 2026-10-12 | FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback t | |
CVE-2026-58471 |
medium | 6.0 | 0.0039 | 2026-07-07 | GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in t | |
CVE-2026-18368 |
medium | 6.0 | 0.0025 | 2026-08-13 | In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling o |