Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (528)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-97765 |
high | 8.8 | 0.0082 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-97766 |
high | 8.8 | 0.0076 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-97776 |
high | 8.8 | 0.0082 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-97780 |
high | 8.8 | 0.0082 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-5272 |
high | 8.8 | 0.0056 | 2026-04-01 | Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to ex | |
CVE-2026-5275 |
high | 8.8 | 0.0045 | 2026-04-01 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attac | |
CVE-2026-6305 |
high | 8.8 | 0.0034 | 2026-04-15 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to | |
CVE-2026-6306 |
high | 8.8 | 0.0034 | 2026-04-15 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to | |
CVE-2026-8509 |
high | 8.8 | 0.0040 | 2026-05-14 | Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to | |
CVE-2026-8529 |
high | 8.8 | 0.0030 | 2026-05-14 | Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to | |
CVE-2026-8531 |
high | 8.8 | 0.0026 | 2026-05-14 | Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote a | |
CVE-2026-0132 |
high | 8.8 | 0.0029 | 2026-06-16 | In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to | |
CVE-2026-0149 |
high | 8.8 | 0.0029 | 2026-06-16 | In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This | |
CVE-2026-12447 |
high | 8.8 | 0.0043 | 2026-06-17 | Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to | |
CVE-2026-12466 |
high | 8.8 | 0.0043 | 2026-06-17 | Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote | |
CVE-2026-13835 |
high | 8.8 | 0.0034 | 2026-06-30 | Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13884 |
high | 8.8 | 0.0020 | 2026-06-30 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to e | |
CVE-2026-14385 |
high | 8.8 | 0.0033 | 2026-07-01 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-14415 |
high | 8.8 | 0.0034 | 2026-07-01 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker | |
CVE-2026-56001 |
high | 8.8 | 0.0039 | 2026-07-08 | A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit s | |
CVE-2026-56002 |
high | 8.8 | 0.0043 | 2026-07-08 | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 a | |
CVE-2026-56003 |
high | 8.8 | 0.0040 | 2026-07-08 | A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in | |
CVE-2026-15123 |
high | 8.8 | 0.0034 | 2026-07-08 | Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attack | |
CVE-2026-15767 |
high | 8.8 | 0.0042 | 2026-07-14 | Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote | |
CVE-2026-44178 |
high | 8.8 | 0.0088 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vu | |
CVE-2026-17935 |
high | 8.8 | 0.0045 | 2026-07-30 | Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17951 |
high | 8.8 | 0.0037 | 2026-07-30 | Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-19004 |
high | 8.8 | 0.0050 | 2026-08-12 | An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when | |
CVE-2026-76034 |
high | 8.8 | 0.0057 | 2026-08-18 | Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execu | |
CVE-2026-62744 |
high | 8.8 | 0.0082 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to | |
CVE-2026-67373 |
high | 8.8 | 0.0091 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ | |
CVE-2026-69522 |
high | 8.8 | 0.0084 | 2026-09-08 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n | |
CVE-2026-77482 |
high | 8.8 | 0.0082 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a netw | |
CVE-2026-96202 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute | |
CVE-2026-10572 |
high | 8.8 | 0.0045 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb | |
CVE-2026-10574 |
high | 8.8 | 0.0044 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb | |
CVE-2026-92208 |
high | 8.8 | 0.0062 | 2026-10-21 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability al | |
CVE-2026-85897 |
high | 8.8 | — | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe | |
CVE-2026-96198 |
high | 8.8 | — | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe | |
CVE-2026-96199 |
high | 8.8 | — | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe | |
CVE-2026-35512 |
high | 8.7 | 0.0058 | 2026-04-17 | xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the | |
CVE-2026-41445 |
high | 8.7 | 0.0029 | 2026-04-20 | KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() | |
CVE-2026-12244 |
high | 8.7 | 0.0049 | 2026-06-25 | If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR co | |
CVE-2026-11826 |
high | 8.7 | 0.0075 | 2026-07-18 | OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_ | |
CVE-2026-64830 |
high | 8.7 | 0.0065 | 2026-07-22 | FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtit | |
CVE-2026-55191 |
high | 8.7 | 0.0062 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients th | |
CVE-2026-55193 |
high | 8.7 | 0.0048 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients us | |
CVE-2026-55194 |
high | 8.7 | 0.0062 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fr | |
CVE-2026-114045 |
high | 8.7 | 0.0058 | 2026-10-21 | FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel becaus | |
CVE-2026-93517 |
high | 8.5 | 0.0019 | 2026-10-28 | A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X |