Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1055)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-77492 |
medium | 5.5 | 0.0040 | 2026-09-08 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information loca | |
CVE-2026-78513 |
medium | 5.5 | 0.0054 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform | |
CVE-2026-41079 |
medium | 5.4 | 0.0041 | 2026-04-24 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. | |
CVE-2026-7950 |
medium | 5.4 | 0.0017 | 2026-05-06 | Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-47222 |
medium | 5.4 | 0.0017 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-47223 |
medium | 5.4 | 0.0022 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-62353 |
medium | 5.4 | 0.0037 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, sour | |
CVE-2026-10773 |
medium | 5.4 | 0.0027 | 2026-08-01 | The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a stat | |
CVE-2023-7340 |
medium | 5.3 | 0.0033 | 2026-03-27 | Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corr | |
CVE-2026-18416 |
medium | 5.3 | 0.0023 | 2026-09-28 | The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a re | |
CVE-2026-105946 |
medium | 5.3 | 0.0046 | 2026-10-27 | Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt | |
CVE-2026-117556 |
medium | 5.3 | 0.0033 | 2026-10-27 | zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/he | |
CVE-2026-103390 |
medium | 5.3 | 0.0043 | 2026-10-28 | An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Ro | |
CVE-2026-102198 |
medium | 5.3 | 0.0079 | 2026-10-13 | Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose info | |
CVE-2026-88086 |
medium | 5.3 | 0.0036 | 2026-10-13 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adj | |
CVE-2026-108466 |
medium | 5.3 | 0.0070 | 2026-10-13 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. | |
CVE-2026-5713 |
medium | 5.3 | 0.0013 | 2026-04-14 | The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "pyt | |
CVE-2026-33857 |
medium | 5.3 | 0.0039 | 2026-05-04 | Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apach | |
CVE-2026-34032 |
medium | 5.3 | 0.0049 | 2026-05-04 | Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affec | |
CVE-2026-8535 |
medium | 5.3 | 0.0019 | 2026-05-14 | Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a | |
CVE-2026-8541 |
medium | 5.3 | 0.0021 | 2026-05-14 | Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had | |
CVE-2026-8543 |
medium | 5.3 | 0.0026 | 2026-05-14 | Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote at | |
CVE-2026-8546 |
medium | 5.3 | 0.0021 | 2026-05-14 | Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remo | |
CVE-2026-9803 |
medium | 5.3 | 0.0042 | 2026-05-28 | A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker c | |
CVE-2026-12033 |
medium | 5.3 | 0.0019 | 2026-06-11 | Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacke | |
CVE-2026-0141 |
medium | 5.3 | 0.0021 | 2026-06-16 | In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. | |
CVE-2026-0155 |
medium | 5.3 | 0.0018 | 2026-06-16 | In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. Th | |
CVE-2026-13890 |
medium | 5.3 | 0.0026 | 2026-06-30 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-13975 |
medium | 5.3 | 0.0026 | 2026-06-30 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-54500 |
medium | 5.3 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-10657 |
medium | 5.3 | 0.0040 | 2026-07-05 | Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/d | |
CVE-2026-44978 |
medium | 5.3 | 0.0053 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulne | |
CVE-2026-55639 |
medium | 5.3 | 0.0042 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the | |
CVE-2026-55777 |
medium | 5.3 | 0.0044 | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix syst | |
CVE-2026-62291 |
medium | 5.3 | 0.0019 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image s | |
CVE-2026-16833 |
medium | 5.3 | 0.0040 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memor | |
CVE-2026-113868 |
medium | 5.3 | 0.0043 | 2026-10-20 | When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the serve | |
CVE-2026-116463 |
medium | 5.3 | 0.0023 | 2026-10-26 | A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_006 | |
CVE-2026-115795 |
medium | 5.3 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 does not check that a complete block header is present in the received data befor | |
CVE-2026-40335 |
medium | 5.2 | 0.0020 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-40338 |
medium | 5.2 | 0.0020 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-40339 |
medium | 5.2 | 0.0020 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-o | |
CVE-2026-60073 |
medium | 5.2 | 0.0024 | 2026-07-16 | An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of | |
CVE-2026-102485 |
medium | 5.2 | 0.0018 | 2026-10-21 | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an atta | |
CVE-2026-50643 |
medium | 5.1 | 0.0014 | 2026-06-18 | 8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU line | |
CVE-2026-14461 |
medium | 5.1 | 0.0044 | 2026-07-10 | mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who ca | |
CVE-2026-71498 |
medium | 5.1 | 0.0017 | 2026-08-06 | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Bu | |
CVE-2026-114038 |
medium | 5.1 | 0.0012 | 2026-10-21 | A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sendi | |
CVE-2026-116261 |
medium | 5.1 | 0.0020 | 2026-10-26 | A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function | |
CVE-2026-116487 |
medium | 5.1 | 0.0029 | 2026-10-26 | NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds r |