Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2025-1218 |
medium | 5.9 | 0.0028 | 2026-09-25 | The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet | |
CVE-2026-13976 |
medium | 5.8 | 0.0019 | 2026-06-30 | Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-70654 |
medium | 5.8 | 0.0011 | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applicati | |
CVE-2025-55640 |
medium | 5.5 | 0.0019 | 2026-10-16 | A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allo | |
CVE-2025-60480 |
medium | 5.5 | 0.0019 | 2026-10-19 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC | |
CVE-2025-60490 |
medium | 5.5 | 0.0018 | 2026-10-21 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c | |
CVE-2026-66810 |
medium | 5.5 | 0.0043 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info | |
CVE-2026-58547 |
medium | 5.5 | 0.0041 | 2026-07-14 | Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to el | |
CVE-2026-83736 |
medium | 5.5 | 0.0046 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc | |
CVE-2026-85831 |
medium | 5.5 | 0.0040 | 2026-10-13 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose in | |
CVE-2026-5244 |
medium | 5.5 | 0.0073 | 2026-04-02 | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv | |
CVE-2026-29043 |
medium | 5.5 | 0.0021 | 2026-04-10 | HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file | |
CVE-2026-27285 |
medium | 5.5 | 0.0014 | 2026-04-14 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vuln | |
CVE-2026-27286 |
medium | 5.5 | 0.0016 | 2026-04-14 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vuln | |
CVE-2026-6530 |
medium | 5.5 | 0.0016 | 2026-04-30 | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of s | |
CVE-2026-15164 |
medium | 5.5 | 0.0014 | 2026-07-08 | Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service | |
CVE-2026-15165 |
medium | 5.5 | 0.0014 | 2026-07-08 | TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service | |
CVE-2026-15170 |
medium | 5.5 | 0.0014 | 2026-07-08 | Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of ser | |
CVE-2026-15173 |
medium | 5.5 | 0.0013 | 2026-07-08 | pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service | |
CVE-2026-15174 |
medium | 5.5 | 0.0013 | 2026-07-08 | Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows den | |
CVE-2026-50012 |
medium | 5.5 | 0.0136 | 2026-07-16 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache | |
CVE-2026-20480 |
medium | 5.5 | 0.0014 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead | |
CVE-2026-19694 |
medium | 5.5 | 0.0013 | 2026-08-13 | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service | |
CVE-2026-11831 |
medium | 5.4 | 0.0020 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very li | |
CVE-2026-93536 |
medium | 5.3 | 0.0017 | 2026-10-28 | A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() i | |
CVE-2026-106564 |
medium | 5.3 | 0.0037 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-116124 |
medium | 5.3 | 0.0043 | 2026-10-26 | A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is th | |
CVE-2026-116258 |
medium | 5.3 | 0.0024 | 2026-10-26 | A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the | |
CVE-2026-116262 |
medium | 5.3 | 0.0032 | 2026-10-26 | A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function w | |
CVE-2026-68765 |
medium | 5.2 | 0.0018 | 2026-08-17 | hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePas | |
CVE-2026-61368 |
medium | 5.0 | 0.0043 | 2026-08-11 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information | |
CVE-2026-86392 |
medium | 4.9 | 0.0034 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-8484 |
medium | 4.8 | 0.0014 | 2026-06-16 | A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size | |
CVE-2026-56372 |
medium | 4.8 | 0.0033 | 2026-07-11 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation t | |
CVE-2026-18370 |
medium | 4.8 | 0.0016 | 2026-08-10 | entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a | |
CVE-2026-70653 |
medium | 4.8 | 0.0012 | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-s | |
CVE-2026-116160 |
medium | 4.8 | 0.0012 | 2026-10-25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X1 | |
CVE-2026-119124 |
medium | 4.8 | — | 2026-10-29 | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where cr | |
CVE-2026-6298 |
medium | 4.3 | 0.0047 | 2026-04-15 | Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to o | |
CVE-2026-8552 |
medium | 4.3 | 0.0019 | 2026-05-14 | Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote att | |
CVE-2026-8560 |
medium | 4.3 | 0.0025 | 2026-05-14 | Heap buffer overflow in SwiftShader in Google Chrome on Mac and iOS prior to 148.0.7778.168 allowed | |
CVE-2026-0130 |
medium | 4.3 | 0.0018 | 2026-06-16 | In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. | |
CVE-2026-54696 |
low | 3.7 | 0.0041 | 2026-06-30 | Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap bu | |
CVE-2026-13587 |
low | 2.9 | 0.0042 | 2026-06-29 | A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_b | |
CVE-2026-13588 |
low | 2.9 | 0.0038 | 2026-06-29 | A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pc | |
CVE-2026-13589 |
low | 2.9 | 0.0039 | 2026-06-29 | A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetL | |
CVE-2026-13590 |
low | 2.9 | 0.0047 | 2026-06-29 | A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::Mo | |
CVE-2026-57198 |
low | 2.3 | 0.0083 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, a | |
CVE-2026-12805 |
low | 2.1 | 0.0047 | 2026-06-21 | A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::pars | |
CVE-2026-54896 |
low | 2.1 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior |