Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1128)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-97839 |
medium | 6.5 | 0.0092 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-97840 |
medium | 6.5 | 0.0092 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-97841 |
medium | 6.5 | 0.0092 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-97842 |
medium | 6.5 | 0.0078 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-97843 |
medium | 6.5 | 0.0091 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-97844 |
medium | 6.5 | 0.0091 | 2026-10-13 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-102867 |
medium | 6.5 | 0.0099 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-108434 |
medium | 6.5 | 0.0074 | 2026-10-15 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-108436 |
medium | 6.5 | 0.0074 | 2026-10-15 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-108453 |
medium | 6.5 | 0.0076 | 2026-10-15 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform | |
CVE-2026-108455 |
medium | 6.5 | 0.0074 | 2026-10-15 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform | |
CVE-2026-69940 |
medium | 6.5 | 0.0104 | 2026-10-13 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information | |
CVE-2026-69955 |
medium | 6.5 | 0.0098 | 2026-10-13 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information | |
CVE-2026-70119 |
medium | 6.5 | 0.0129 | 2026-10-13 | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. | |
CVE-2026-70166 |
medium | 6.5 | 0.0129 | 2026-10-13 | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. | |
CVE-2026-70206 |
medium | 6.5 | 0.0097 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-70244 |
medium | 6.5 | 0.0104 | 2026-10-13 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw | |
CVE-2026-70263 |
medium | 6.5 | 0.0100 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-83521 |
medium | 6.5 | 0.0113 | 2026-10-13 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov | |
CVE-2026-83649 |
medium | 6.5 | 0.0123 | 2026-10-13 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize | |
CVE-2026-83651 |
medium | 6.5 | 0.0104 | 2026-10-13 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net | |
CVE-2026-83667 |
medium | 6.5 | 0.0123 | 2026-10-13 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service | |
CVE-2026-83671 |
medium | 6.5 | 0.0046 | 2026-10-13 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | |
CVE-2026-83703 |
medium | 6.5 | 0.0066 | 2026-10-13 | Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an a | |
CVE-2026-84007 |
medium | 6.5 | 0.0100 | 2026-10-13 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose infor | |
CVE-2026-85331 |
medium | 6.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i | |
CVE-2026-85337 |
medium | 6.5 | 0.0087 | 2026-10-13 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information | |
CVE-2026-85797 |
medium | 6.5 | 0.0091 | 2026-10-13 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net | |
CVE-2026-85821 |
medium | 6.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a | |
CVE-2026-85847 |
medium | 6.5 | 0.0065 | 2026-10-13 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i | |
CVE-2026-88151 |
medium | 6.5 | 0.0083 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-88153 |
medium | 6.5 | 0.0083 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-88169 |
medium | 6.5 | 0.0084 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-88175 |
medium | 6.5 | 0.0084 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-94506 |
medium | 6.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose informatio | |
CVE-2023-25738 |
medium | 6.5 | 0.0063 | 2023-06-02 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated | |
CVE-2023-32206 |
medium | 6.5 | 0.0070 | 2023-06-02 | An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects | |
CVE-2026-6364 |
medium | 6.5 | 0.0025 | 2026-04-15 | Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obt | |
CVE-2026-28918 |
medium | 6.5 | 0.0049 | 2026-05-11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iO | |
CVE-2026-28956 |
medium | 6.5 | 0.0052 | 2026-05-11 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-12026 |
medium | 6.5 | 0.0024 | 2026-06-11 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote at | |
CVE-2026-0127 |
medium | 6.5 | 0.0025 | 2026-06-16 | In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bound | |
CVE-2026-0128 |
medium | 6.5 | 0.0019 | 2026-06-16 | In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overfl | |
CVE-2026-0165 |
medium | 6.5 | 0.0018 | 2026-06-16 | In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a mis | |
CVE-2026-12461 |
medium | 6.5 | 0.0024 | 2026-06-17 | Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote at | |
CVE-2026-49271 |
medium | 6.5 | 0.0036 | 2026-06-19 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompresse | |
CVE-2026-9539 |
medium | 6.5 | 0.0022 | 2026-06-24 | An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in free | |
CVE-2026-13820 |
medium | 6.5 | 0.0034 | 2026-06-30 | Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13858 |
medium | 6.5 | 0.0029 | 2026-06-30 | Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ob | |
CVE-2026-13873 |
medium | 6.5 | 0.0029 | 2026-06-30 | Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ob |