Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-67625 |
high | 8.5 | 0.0056 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ | |
CVE-2026-68883 |
high | 8.5 | 0.0056 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a | |
CVE-2026-85886 |
high | 8.5 | 0.0040 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ | |
CVE-2026-40614 |
high | 8.5 | 0.0022 | 2026-04-21 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, | |
CVE-2026-43906 |
high | 8.5 | 0.0019 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-70638 |
high | 8.5 | 0.0023 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android | 1 PoC |
CVE-2026-75141 |
high | 8.5 | 0.0020 | 2026-08-19 | FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an | |
CVE-2026-75144 |
high | 8.5 | 0.0020 | 2026-08-19 | FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP pac | |
CVE-2026-70130 |
high | 8.4 | 0.0034 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local | |
CVE-2026-49184 |
high | 8.4 | 0.0034 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | |
CVE-2026-54122 |
high | 8.4 | 0.0036 | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. | |
CVE-2026-54992 |
high | 8.4 | 0.0034 | 2026-07-14 | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker | 1 PoC |
CVE-2026-34545 |
high | 8.4 | 0.0063 | 2026-04-01 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-40706 |
high | 8.4 | 0.0016 | 2026-04-21 | In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix | |
CVE-2026-40363 |
high | 8.4 | 0.0038 | 2026-05-12 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local | |
CVE-2026-40364 |
high | 8.4 | 0.0442 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an una | |
CVE-2026-69242 |
high | 8.4 | 0.0019 | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted | |
CVE-2026-72970 |
high | 8.3 | 0.0073 | 2026-08-14 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe | |
CVE-2026-6361 |
high | 8.3 | 0.0031 | 2026-04-15 | Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote | |
CVE-2026-7900 |
high | 8.3 | 0.0024 | 2026-05-06 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who | |
CVE-2026-8525 |
high | 8.3 | 0.0023 | 2026-05-14 | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attac | |
CVE-2026-12010 |
high | 8.3 | 0.0026 | 2026-06-11 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote att | |
CVE-2026-12030 |
high | 8.3 | 0.0018 | 2026-06-11 | Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote atta | |
CVE-2026-45696 |
high | 8.3 | 0.0042 | 2026-06-18 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in t | |
CVE-2026-14427 |
high | 8.3 | 0.0026 | 2026-07-01 | Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who h | |
CVE-2026-19138 |
high | 8.3 | 0.0033 | 2026-08-06 | Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote att | |
CVE-2026-76046 |
high | 8.3 | 0.0037 | 2026-08-18 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote att | |
CVE-2026-50680 |
high | 8.2 | 0.0034 | 2026-07-14 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo | |
CVE-2026-33602 |
high | 8.2 | 0.0073 | 2026-04-22 | A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum co | |
CVE-2026-62781 |
high | 8.1 | 0.0071 | 2026-08-11 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a net | |
CVE-2026-65679 |
high | 8.1 | 0.0071 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut | |
CVE-2026-65796 |
high | 8.1 | 0.0071 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut | |
CVE-2026-71331 |
high | 8.1 | 0.0071 | 2026-08-11 | Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized att | |
CVE-2026-49164 |
high | 8.1 | 0.0079 | 2026-07-14 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to ex | |
CVE-2026-88185 |
high | 8.1 | 0.0078 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-70038 |
high | 8.1 | 0.0075 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
CVE-2026-70269 |
high | 8.1 | 0.0079 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-22828 |
high | 8.1 | 0.0090 | 2026-04-14 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, Fort | |
CVE-2026-20465 |
high | 8.1 | 0.0031 | 2026-08-03 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-93479 |
high | 8.1 | 0.0120 | 2026-10-14 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching | |
CVE-2026-42975 |
high | 8.0 | 0.0054 | 2026-07-14 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu | |
CVE-2026-50683 |
high | 8.0 | 0.0058 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege | |
CVE-2026-69363 |
high | 8.0 | 0.0075 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi | |
CVE-2026-62752 |
high | 7.8 | 0.0033 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges l | |
CVE-2026-62871 |
high | 7.8 | 0.0047 | 2026-08-11 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | |
CVE-2026-62886 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally | |
CVE-2026-68807 |
high | 7.8 | 0.0047 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-105003 |
high | 7.8 | 0.0034 | 2026-10-13 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l | |
CVE-2026-108130 |
high | 7.8 | 0.0037 | 2026-10-13 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz | |
CVE-2026-70048 |
high | 7.8 | 0.0038 | 2026-10-13 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to |