Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-114038 |
medium | 5.1 | 0.0012 | 2026-10-21 | A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sendi | |
CVE-2026-116261 |
medium | 5.1 | 0.0020 | 2026-10-26 | A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function | |
CVE-2026-116487 |
medium | 5.1 | 0.0029 | 2026-10-26 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds r | |
CVE-2026-41034 |
medium | 5.0 | 0.0029 | 2026-04-16 | ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conver | |
CVE-2026-43767 |
medium | 5.0 | 0.0015 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-67628 |
medium | 4.9 | 0.0080 | 2026-10-13 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-116726 |
medium | 4.8 | 0.0013 | 2026-10-26 | Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that | |
CVE-2026-116727 |
medium | 4.8 | 0.0013 | 2026-10-26 | gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that | |
CVE-2026-116729 |
medium | 4.8 | 0.0013 | 2026-10-26 | libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metad | |
CVE-2026-116732 |
medium | 4.8 | 0.0013 | 2026-10-26 | libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() | |
CVE-2026-56788 |
medium | 4.8 | 0.0017 | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when proces | |
CVE-2026-56374 |
medium | 4.8 | 0.0022 | 2026-07-08 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to | |
CVE-2026-12478 |
medium | 4.8 | 0.0024 | 2026-07-14 | The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside t | |
CVE-2026-75904 |
medium | 4.8 | 0.0019 | 2026-08-18 | libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The | |
CVE-2026-16866 |
medium | 4.8 | 0.0034 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-111678 |
medium | 4.8 | 0.0022 | 2026-10-16 | Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8Chr | |
CVE-2026-116142 |
medium | 4.8 | 0.0012 | 2026-10-25 | ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to | |
CVE-2026-56361 |
medium | 4.8 | 0.0013 | 2026-06-30 | ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bo | |
CVE-2026-56370 |
medium | 4.8 | 0.0018 | 2026-06-24 | ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsIma | |
CVE-2026-70063 |
medium | 4.7 | 0.0035 | 2026-10-13 | Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. | |
CVE-2026-69506 |
medium | 4.7 | 0.0035 | 2026-10-13 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa | |
CVE-2026-69974 |
medium | 4.7 | 0.0032 | 2026-10-13 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information l | |
CVE-2026-49794 |
medium | 4.6 | 0.0047 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker | |
CVE-2026-88226 |
medium | 4.6 | 0.0051 | 2026-10-13 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform | |
CVE-2026-56391 |
medium | 4.6 | 0.0013 | 2026-07-24 | GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte inp | |
CVE-2026-22185 |
medium | 4.6 | 0.0015 | 2026-01-07 | OpenLDAP Lightning Memory-Mapped Database (LMDB) versions 0.9.14 before 0.9.34, prior to commit 8e1f | |
CVE-2026-35233 |
medium | 4.4 | 0.0011 | 2026-05-01 | An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an ou | |
CVE-2026-20488 |
medium | 4.4 | 0.0016 | 2026-08-03 | In display, there is a possible information disclosure due to a missing bounds check. This could lea | |
CVE-2026-20489 |
medium | 4.4 | 0.0016 | 2026-08-03 | In display, there is a possible information disclosure due to an integer overflow. This could lead t | |
CVE-2026-20490 |
medium | 4.4 | 0.0014 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to lo | |
CVE-2026-20496 |
medium | 4.4 | 0.0015 | 2026-08-03 | In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead | |
CVE-2026-107472 |
medium | 4.3 | 0.0012 | 2026-10-27 | An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs | |
CVE-2026-58496 |
medium | 4.3 | 0.0021 | 2026-10-27 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFN | |
CVE-2026-103393 |
medium | 4.3 | 0.0015 | 2026-10-28 | An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Rou | |
CVE-2026-7904 |
medium | 4.3 | 0.0019 | 2026-05-06 | Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to per | |
CVE-2026-7933 |
medium | 4.3 | 0.0018 | 2026-05-06 | Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to | |
CVE-2026-7983 |
medium | 4.3 | 0.0019 | 2026-05-06 | Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak | |
CVE-2026-47224 |
medium | 4.3 | 0.0019 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-12303 |
medium | 4.3 | 0.0022 | 2026-06-16 | Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This | |
CVE-2026-0130 |
medium | 4.3 | 0.0018 | 2026-06-16 | In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. | |
CVE-2026-0140 |
medium | 4.3 | 0.0018 | 2026-06-16 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This | |
CVE-2026-0157 |
medium | 4.3 | 0.0017 | 2026-06-16 | In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This co | |
CVE-2026-17772 |
medium | 4.3 | 0.0026 | 2026-07-30 | Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to per | |
CVE-2026-12630 |
medium | 4.3 | 0.0026 | 2026-08-17 | Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds read in g | |
CVE-2026-12669 |
medium | 4.3 | 0.0016 | 2026-10-19 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malf | |
CVE-2026-87849 |
medium | 4.3 | 0.0035 | 2026-10-21 | The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object- | |
CVE-2026-93009 |
medium | 4.3 | — | 2026-10-29 | A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a c | |
CVE-2026-100132 |
medium | 4.3 | 0.0044 | 2026-10-20 | Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of | |
CVE-2026-12548 |
medium | 4.2 | 0.0025 | 2026-07-21 | A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an intege | |
CVE-2026-0142 |
medium | 4.0 | 0.0007 | 2026-06-16 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input va |