Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-63887 |
critical | 9.8 | 0.0078 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscs | |
CVE-2026-41252 |
critical | 9.8 | 0.0111 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, | |
CVE-2026-76886 |
critical | 9.8 | 0.0038 | 2026-08-19 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | |
CVE-2025-70293 |
critical | 9.8 | 0.0077 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in f | |
CVE-2026-67631 |
critical | 9.8 | 0.0097 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a netw | |
CVE-2026-111183 |
critical | 9.8 | 0.0070 | 2026-10-21 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi | |
CVE-2026-78846 |
critical | 9.8 | 0.0045 | 2026-10-22 | Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsi | |
CVE-2026-50380 |
critical | 9.6 | 0.0082 | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a ne | |
CVE-2026-6296 |
critical | 9.6 | 0.0056 | 2026-04-15 | Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to | |
CVE-2026-13798 |
critical | 9.6 | 0.0037 | 2026-06-30 | Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-17680 |
critical | 9.6 | 0.0037 | 2026-07-30 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17758 |
critical | 9.6 | 0.0037 | 2026-07-30 | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to po | |
CVE-2026-76036 |
critical | 9.6 | 0.0051 | 2026-08-18 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote atta | |
CVE-2026-76933 |
critical | 9.4 | 0.0045 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affec | |
CVE-2026-76937 |
critical | 9.4 | 0.0045 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe | |
CVE-2026-86576 |
critical | 9.4 | 0.0045 | 2026-10-27 | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Managem | |
CVE-2026-8987 |
critical | 9.4 | 0.0064 | 2026-07-21 | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set | |
CVE-2026-63939 |
critical | 9.3 | 0.0020 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct m | |
CVE-2026-40504 |
critical | 9.3 | 0.0064 | 2026-04-16 | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec f | |
CVE-2026-32956 |
critical | 9.3 | 0.0052 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vul | |
CVE-2026-55971 |
critical | 9.3 | 0.0098 | 2026-07-27 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache T | |
CVE-2026-67191 |
critical | 9.3 | 0.0096 | 2026-07-29 | Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that | |
CVE-2026-75143 |
critical | 9.3 | 0.0070 | 2026-08-19 | FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavforma | |
CVE-2026-112398 |
critical | 9.2 | 0.0070 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write d | |
CVE-2026-112403 |
critical | 9.2 | 0.0095 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width sc | |
CVE-2026-112709 |
critical | 9.2 | 0.0042 | 2026-10-27 | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attac | |
CVE-2026-112710 |
critical | 9.2 | 0.0042 | 2026-10-27 | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows a | |
CVE-2025-34522 |
critical | 9.2 | 0.0056 | 2025-08-27 | A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Dat | |
CVE-2026-42945 |
critical | 9.2 | 0.6805 | 2026-05-13 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vu | |
CVE-2026-2467 |
critical | 9.2 | 0.0019 | 2026-06-17 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflo | |
CVE-2026-13072 |
critical | 9.2 | 0.0040 | 2026-07-22 | When compute mode is enabled on a standalone mongod instance, insufficient validation of externally | |
CVE-2026-49035 |
critical | 9.2 | 0.0061 | 2026-07-23 | The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate reques | |
CVE-2026-112393 |
critical | 9.2 | 0.0102 | 2026-10-19 | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and s | |
CVE-2026-10136 |
critical | 9.1 | 0.0060 | 2026-10-20 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (v | |
CVE-2026-114112 |
high | 8.9 | 0.0024 | 2026-10-21 | Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possibl | |
CVE-2026-108467 |
high | 8.8 | 0.0100 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to e | |
CVE-2026-70068 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attac | |
CVE-2026-70089 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a net | |
CVE-2026-70149 |
high | 8.8 | 0.0093 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs | |
CVE-2026-70210 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges o | |
CVE-2026-70258 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to | |
CVE-2026-70262 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a ne | |
CVE-2026-77496 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c | |
CVE-2026-83789 |
high | 8.8 | 0.0085 | 2026-10-13 | Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileg | |
CVE-2026-85339 |
high | 8.8 | 0.0054 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-85905 |
high | 8.8 | 0.0035 | 2026-10-13 | Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p | |
CVE-2026-85931 |
high | 8.8 | 0.0085 | 2026-10-13 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to | |
CVE-2026-85936 |
high | 8.8 | 0.0054 | 2026-10-13 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. | |
CVE-2026-88142 |
high | 8.8 | 0.0085 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta | |
CVE-2026-88157 |
high | 8.8 | 0.0052 | 2026-10-13 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov |