Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-18583 |
medium | 5.5 | 0.0086 | 2026-08-03 | A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the func | |
CVE-2026-7405 |
medium | 5.5 | 0.0016 | 2026-08-06 | A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, c | |
CVE-2026-66151 |
medium | 5.5 | 0.0016 | 2026-08-07 | SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel | |
CVE-2026-16883 |
medium | 5.5 | 0.0015 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive infor | |
CVE-2026-98145 |
medium | 5.5 | 0.0010 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command | |
CVE-2026-41079 |
medium | 5.4 | 0.0041 | 2026-04-24 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. | |
CVE-2026-7950 |
medium | 5.4 | 0.0017 | 2026-05-06 | Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-47222 |
medium | 5.4 | 0.0017 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-47223 |
medium | 5.4 | 0.0022 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-62353 |
medium | 5.4 | 0.0037 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, sour | |
CVE-2026-10773 |
medium | 5.4 | 0.0027 | 2026-08-01 | The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a stat | |
CVE-2023-7340 |
medium | 5.3 | 0.0033 | 2026-03-27 | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corr | |
CVE-2026-18416 |
medium | 5.3 | 0.0023 | 2026-09-28 | The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a re | |
CVE-2026-105946 |
medium | 5.3 | 0.0046 | 2026-10-27 | Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt | |
CVE-2026-117556 |
medium | 5.3 | 0.0033 | 2026-10-27 | zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/he | |
CVE-2026-103390 |
medium | 5.3 | 0.0043 | 2026-10-28 | An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Ro | |
CVE-2026-102198 |
medium | 5.3 | 0.0079 | 2026-10-13 | Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose info | |
CVE-2026-88086 |
medium | 5.3 | 0.0036 | 2026-10-13 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adj | |
CVE-2026-108466 |
medium | 5.3 | 0.0070 | 2026-10-13 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. | |
CVE-2026-5713 |
medium | 5.3 | 0.0013 | 2026-04-14 | The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "pyt | |
CVE-2026-33857 |
medium | 5.3 | 0.0039 | 2026-05-04 | Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apach | |
CVE-2026-34032 |
medium | 5.3 | 0.0049 | 2026-05-04 | Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affec | |
CVE-2026-8535 |
medium | 5.3 | 0.0019 | 2026-05-14 | Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a | |
CVE-2026-8541 |
medium | 5.3 | 0.0021 | 2026-05-14 | Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had | |
CVE-2026-8543 |
medium | 5.3 | 0.0026 | 2026-05-14 | Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote at | |
CVE-2026-8546 |
medium | 5.3 | 0.0021 | 2026-05-14 | Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remo | |
CVE-2026-9803 |
medium | 5.3 | 0.0042 | 2026-05-28 | A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker c | |
CVE-2026-12033 |
medium | 5.3 | 0.0019 | 2026-06-11 | Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacke | |
CVE-2026-0141 |
medium | 5.3 | 0.0021 | 2026-06-16 | In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. | |
CVE-2026-0155 |
medium | 5.3 | 0.0018 | 2026-06-16 | In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. Th | |
CVE-2026-13890 |
medium | 5.3 | 0.0026 | 2026-06-30 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-13975 |
medium | 5.3 | 0.0026 | 2026-06-30 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-54500 |
medium | 5.3 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-10657 |
medium | 5.3 | 0.0040 | 2026-07-05 | Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/d | |
CVE-2026-44978 |
medium | 5.3 | 0.0053 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulne | |
CVE-2026-55639 |
medium | 5.3 | 0.0042 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the | |
CVE-2026-55777 |
medium | 5.3 | 0.0044 | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix syst | |
CVE-2026-62291 |
medium | 5.3 | 0.0019 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image s | |
CVE-2026-16833 |
medium | 5.3 | 0.0040 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memor | |
CVE-2026-113868 |
medium | 5.3 | 0.0043 | 2026-10-20 | When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the serve | |
CVE-2026-116463 |
medium | 5.3 | 0.0023 | 2026-10-26 | A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_006 | |
CVE-2026-115795 |
medium | 5.3 | — | 2026-10-29 | P-Net before 1.0.3 does not check that a complete block header is present in the received data befor | |
CVE-2026-40335 |
medium | 5.2 | 0.0020 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-40338 |
medium | 5.2 | 0.0020 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-40339 |
medium | 5.2 | 0.0020 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-60073 |
medium | 5.2 | 0.0024 | 2026-07-16 | An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of | |
CVE-2026-102485 |
medium | 5.2 | 0.0018 | 2026-10-21 | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an atta | |
CVE-2026-50643 |
medium | 5.1 | 0.0014 | 2026-06-18 | 8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU line | |
CVE-2026-14461 |
medium | 5.1 | 0.0044 | 2026-07-10 | mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who ca | |
CVE-2026-71498 |
medium | 5.1 | 0.0017 | 2026-08-06 | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Bu |