Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1856)
CWE-416 (1301)
CWE-862 (1191)
CWE-89 (1107)
CWE-22 (1028)
CWE-125 (885)
CWE-200 (849)
CWE-306 (840)
CWE-122 (831)
CWE-20 (798)
CWE-78 (716)
CWE-787 (693)
CWE-918 (693)
CWE-863 (648)
CWE-94 (642)
CWE-74 (601)
CWE-639 (547)
CWE-400 (532)
CWE-119 (503)
CWE-269 (502)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (375)
CWE-190 (372)
CWE-362 (323)
CWE-352 (283)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-108434 |
medium | 6.5 | 0.0074 | 2026-10-15 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-108436 |
medium | 6.5 | 0.0074 | 2026-10-15 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-108453 |
medium | 6.5 | 0.0076 | 2026-10-15 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform | |
CVE-2026-108455 |
medium | 6.5 | 0.0074 | 2026-10-15 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform | |
CVE-2026-69940 |
medium | 6.5 | 0.0104 | 2026-10-13 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information | |
CVE-2026-69955 |
medium | 6.5 | 0.0098 | 2026-10-13 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information | |
CVE-2026-70119 |
medium | 6.5 | 0.0129 | 2026-10-13 | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. | |
CVE-2026-70166 |
medium | 6.5 | 0.0129 | 2026-10-13 | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. | |
CVE-2026-70206 |
medium | 6.5 | 0.0097 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-70244 |
medium | 6.5 | 0.0104 | 2026-10-13 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw | |
CVE-2026-70263 |
medium | 6.5 | 0.0100 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-83521 |
medium | 6.5 | 0.0113 | 2026-10-13 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov | |
CVE-2026-83649 |
medium | 6.5 | 0.0123 | 2026-10-13 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize | |
CVE-2026-83667 |
medium | 6.5 | 0.0123 | 2026-10-13 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service | |
CVE-2026-83671 |
medium | 6.5 | 0.0047 | 2026-10-13 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | |
CVE-2026-83703 |
medium | 6.5 | 0.0067 | 2026-10-13 | Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an a | |
CVE-2026-84007 |
medium | 6.5 | 0.0100 | 2026-10-13 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose infor | |
CVE-2026-85331 |
medium | 6.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i | |
CVE-2026-85337 |
medium | 6.5 | 0.0087 | 2026-10-13 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information | |
CVE-2026-85797 |
medium | 6.5 | 0.0091 | 2026-10-13 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net | |
CVE-2026-85821 |
medium | 6.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a | |
CVE-2026-85847 |
medium | 6.5 | 0.0067 | 2026-10-13 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i | |
CVE-2026-88151 |
medium | 6.5 | 0.0083 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-88153 |
medium | 6.5 | 0.0083 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-88169 |
medium | 6.5 | 0.0084 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-88175 |
medium | 6.5 | 0.0084 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-94506 |
medium | 6.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose informatio | |
CVE-2023-25738 |
medium | 6.5 | 0.0063 | 2023-06-02 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated | |
CVE-2023-32206 |
medium | 6.5 | 0.0070 | 2023-06-02 | An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects | |
CVE-2026-6364 |
medium | 6.5 | 0.0025 | 2026-04-15 | Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obt | |
CVE-2026-28918 |
medium | 6.5 | 0.0049 | 2026-05-11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iO | |
CVE-2026-28956 |
medium | 6.5 | 0.0052 | 2026-05-11 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-12026 |
medium | 6.5 | 0.0024 | 2026-06-11 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote at | |
CVE-2026-0127 |
medium | 6.5 | 0.0025 | 2026-06-16 | In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bound | |
CVE-2026-0128 |
medium | 6.5 | 0.0019 | 2026-06-16 | In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overfl | |
CVE-2026-0165 |
medium | 6.5 | 0.0018 | 2026-06-16 | In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a mis | |
CVE-2026-12461 |
medium | 6.5 | 0.0024 | 2026-06-17 | Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote at | |
CVE-2026-49271 |
medium | 6.5 | 0.0036 | 2026-06-19 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompresse | |
CVE-2026-9539 |
medium | 6.5 | 0.0022 | 2026-06-24 | An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in free | |
CVE-2026-13820 |
medium | 6.5 | 0.0034 | 2026-06-30 | Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13858 |
medium | 6.5 | 0.0029 | 2026-06-30 | Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ob | |
CVE-2026-13873 |
medium | 6.5 | 0.0029 | 2026-06-30 | Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ob | |
CVE-2026-13906 |
medium | 6.5 | 0.0032 | 2026-06-30 | Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ob | |
CVE-2026-44041 |
medium | 6.5 | 0.0041 | 2026-07-01 | UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion h | |
CVE-2026-14384 |
medium | 6.5 | 0.0026 | 2026-07-01 | Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote atta | |
CVE-2026-14386 |
medium | 6.5 | 0.0028 | 2026-07-01 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obt | |
CVE-2026-14388 |
medium | 6.5 | 0.0028 | 2026-07-01 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obt | |
CVE-2026-14396 |
medium | 6.5 | 0.0025 | 2026-07-01 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to lea | |
CVE-2026-47729 |
medium | 6.5 | 0.0150 | 2026-07-16 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic corre | |
CVE-2026-55645 |
medium | 6.5 | 0.0048 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the |