Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-96639 |
critical | 9.8 | 0.0066 | 2026-10-21 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an Imag | |
CVE-2026-97805 |
critical | 9.8 | 0.0106 | 2026-10-13 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute | |
CVE-2026-5735 |
critical | 9.8 | 0.0026 | 2026-04-07 | Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evi | |
CVE-2026-42799 |
critical | 9.8 | 0.0028 | 2026-04-30 | Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vuln | |
CVE-2026-59147 |
critical | 9.8 | 0.0055 | 2026-07-21 | Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an | |
CVE-2026-43757 |
critical | 9.8 | 0.0060 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 | |
CVE-2026-43773 |
critical | 9.8 | 0.0059 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequ | |
CVE-2026-43809 |
critical | 9.8 | 0.0060 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 | |
CVE-2026-71256 |
critical | 9.8 | 0.0055 | 2026-08-05 | nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in n | |
CVE-2026-102560 |
critical | 9.8 | 0.0042 | 2026-09-29 | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large | |
CVE-2026-6920 |
critical | 9.6 | 0.0021 | 2026-04-23 | Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attac | |
CVE-2026-14416 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to pote | |
CVE-2026-14420 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-16419 |
critical | 9.6 | 0.0026 | 2026-07-21 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a | |
CVE-2026-17701 |
critical | 9.6 | 0.0047 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 a | |
CVE-2026-17801 |
critical | 9.6 | 0.0043 | 2026-07-30 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-16839 |
critical | 9.4 | 0.0052 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive info | |
CVE-2026-63938 |
critical | 9.3 | 0.0020 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request ind | |
CVE-2026-3894 |
critical | 9.2 | 0.0020 | 2026-06-17 | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffer | |
CVE-2026-5445 |
critical | 9.1 | 0.0067 | 2026-04-09 | An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDec | |
CVE-2026-25206 |
critical | 9.1 | 0.0018 | 2026-04-13 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This | |
CVE-2026-25209 |
critical | 9.1 | 0.0025 | 2026-04-13 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This | |
CVE-2026-33598 |
critical | 9.1 | 0.0107 | 2026-04-22 | A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAd | |
CVE-2026-34000 |
critical | 9.1 | 0.0049 | 2026-05-05 | A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry pr | |
CVE-2026-12087 |
critical | 9.1 | 0.0057 | 2026-06-15 | Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_s | |
CVE-2026-9265 |
critical | 9.1 | 0.0063 | 2026-06-20 | Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8 | |
CVE-2026-56015 |
critical | 9.1 | 0.0065 | 2026-07-03 | Net::IP::LPM versions before 1.11 for Perl allow a heap out-of-bounds read via an unbounded prefix l | |
CVE-2026-14740 |
critical | 9.1 | 0.0066 | 2026-07-07 | DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial | |
CVE-2026-58102 |
critical | 9.1 | 0.0034 | 2026-07-13 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certi | |
CVE-2026-10672 |
critical | 9.1 | 0.0058 | 2026-07-14 | subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static | |
CVE-2026-60082 |
critical | 9.1 | 0.0065 | 2026-07-14 | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When t | |
CVE-2026-57073 |
critical | 9.1 | 0.0065 | 2026-07-16 | HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse | |
CVE-2026-57074 |
critical | 9.1 | 0.0063 | 2026-07-16 | XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse f | |
CVE-2026-57075 |
critical | 9.1 | 0.0063 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table | |
CVE-2026-64609 |
critical | 9.1 | 0.0078 | 2026-07-21 | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is | |
CVE-2026-59139 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated ar | |
CVE-2026-59140 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated no | |
CVE-2026-59141 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated no | |
CVE-2026-59142 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated a | |
CVE-2026-59145 |
critical | 9.1 | 0.0054 | 2026-07-21 | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, | |
CVE-2026-71560 |
critical | 9.1 | 0.0077 | 2026-08-07 | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory | |
CVE-2026-17423 |
critical | 9.1 | 0.0045 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive info | |
CVE-2026-18716 |
critical | 9.1 | 0.0039 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain | |
CVE-2026-34971 |
critical | 9.0 | 0.0032 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's | |
CVE-2026-34987 |
critical | 9.0 | 0.0028 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime wi | |
CVE-2026-54209 |
high | 8.9 | 0.0041 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function trigg | |
CVE-2023-0698 |
high | 8.8 | 0.0065 | 2023-02-07 | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to pe | |
CVE-2026-63947 |
high | 8.8 | 0.0035 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing le | |
CVE-2026-105007 |
high | 8.8 | 0.0085 | 2026-10-13 | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) | |
CVE-2026-70210 |
high | 8.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges o |