Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2636)
CWE-79 (1858)
CWE-416 (1301)
CWE-862 (1192)
CWE-89 (1108)
CWE-22 (1029)
CWE-125 (885)
CWE-200 (849)
CWE-306 (840)
CWE-122 (831)
CWE-20 (799)
CWE-78 (716)
CWE-918 (694)
CWE-787 (693)
CWE-863 (648)
CWE-94 (642)
CWE-74 (601)
CWE-639 (548)
CWE-400 (532)
CWE-119 (503)
CWE-269 (502)
CWE-502 (472)
CWE-770 (445)
CWE-287 (433)
CWE-121 (408)
CWE-77 (375)
CWE-190 (372)
CWE-362 (323)
CWE-352 (284)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-12632 |
medium | 6.5 | 0.0029 | 2026-08-18 | Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c tak | |
CVE-2026-69550 |
medium | 6.5 | 0.0092 | 2026-08-19 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information | |
CVE-2026-75370 |
medium | 6.5 | 0.0036 | 2026-08-24 | An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of Space | |
CVE-2026-67629 |
medium | 6.5 | 0.0100 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-67630 |
medium | 6.5 | 0.0100 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-67633 |
medium | 6.5 | 0.0114 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. | |
CVE-2026-68781 |
medium | 6.5 | 0.0100 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-66308 |
medium | 6.5 | 0.0114 | 2026-09-08 | Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a networ | |
CVE-2026-113050 |
medium | 6.5 | 0.0030 | 2026-10-20 | Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read | |
CVE-2026-113054 |
medium | 6.5 | 0.0033 | 2026-10-20 | Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacke | |
CVE-2026-113102 |
medium | 6.5 | 0.0033 | 2026-10-20 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113151 |
medium | 6.5 | 0.0033 | 2026-10-20 | Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to rea | |
CVE-2026-113199 |
medium | 6.5 | 0.0032 | 2026-10-20 | Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to | |
CVE-2026-113277 |
medium | 6.5 | 0.0032 | 2026-10-20 | Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a rem | |
CVE-2026-113295 |
medium | 6.5 | 0.0034 | 2026-10-20 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote a | |
CVE-2026-113329 |
medium | 6.5 | 0.0034 | 2026-10-20 | Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote a | |
CVE-2026-82943 |
medium | 6.5 | 0.0017 | 2026-10-26 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages t | |
CVE-2026-115680 |
medium | 6.5 | 0.0034 | 2026-10-26 | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retr | |
CVE-2026-57184 |
medium | 6.3 | 0.0056 | 2026-10-26 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-42934 |
medium | 6.3 | 0.0073 | 2026-05-13 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When ch | |
CVE-2026-57235 |
medium | 6.3 | 0.0043 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-54908 |
medium | 6.3 | 0.0054 | 2026-07-01 | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are v | |
CVE-2026-60065 |
medium | 6.3 | 0.0045 | 2026-07-15 | When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (n | |
CVE-2026-59143 |
medium | 6.3 | 0.0029 | 2026-07-21 | Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalid | |
CVE-2026-43630 |
medium | 6.3 | 0.0050 | 2026-08-06 | llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent mem | |
CVE-2026-115485 |
medium | 6.3 | 0.0020 | 2026-10-23 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on | |
CVE-2026-116544 |
medium | 6.3 | 0.0035 | 2026-10-26 | Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in | |
CVE-2026-116733 |
medium | 6.3 | 0.0038 | 2026-10-26 | flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number tha | |
CVE-2026-56378 |
medium | 6.3 | 0.0039 | 2026-06-21 | ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD | |
CVE-2026-50420 |
medium | 6.2 | 0.0041 | 2026-07-14 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information local | |
CVE-2026-72522 |
medium | 6.2 | 0.0019 | 2026-08-10 | libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates a | |
CVE-2026-17535 |
medium | 6.2 | 0.0016 | 2026-08-11 | Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which | |
CVE-2026-92824 |
medium | 6.2 | 0.0012 | 2026-10-21 | A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorr | |
CVE-2026-115919 |
medium | 6.2 | 0.0018 | 2026-10-26 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior | |
CVE-2026-115920 |
medium | 6.2 | 0.0018 | 2026-10-26 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From | |
CVE-2026-50453 |
medium | 6.1 | 0.0051 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker | |
CVE-2026-54988 |
medium | 6.1 | 0.0046 | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-55898 |
medium | 6.1 | 0.0047 | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-39956 |
medium | 6.1 | 0.0017 | 2026-04-13 | jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq's src/bui | |
CVE-2026-40333 |
medium | 6.1 | 0.0022 | 2026-04-18 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two funct | |
CVE-2026-40340 |
medium | 6.1 | 0.0022 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-58304 |
medium | 6.1 | 0.0016 | 2026-07-09 | Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflo | |
CVE-2026-58307 |
medium | 6.1 | 0.0015 | 2026-07-09 | Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overrea | |
CVE-2026-47254 |
medium | 6.1 | 0.0016 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sa | |
CVE-2026-50735 |
medium | 6.1 | 0.0038 | 2026-07-28 | pglogical's apply worker does not sufficiently validate the length of certain fields in incoming rep | |
CVE-2026-12232 |
medium | 6.1 | 0.0015 | 2026-08-12 | The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/ | |
CVE-2026-57192 |
medium | 6.0 | 0.0065 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-7425 |
medium | 6.0 | 0.0023 | 2026-04-29 | Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP b | |
CVE-2026-28532 |
medium | 6.0 | 0.0022 | 2026-04-30 | FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering | |
CVE-2026-19643 |
medium | 6.0 | 0.0056 | 2026-08-12 | An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some pla |