Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70210 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges o | |
CVE-2026-83797 |
high | 8.8 | 0.0085 | 2026-10-13 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute | |
CVE-2026-88115 |
high | 8.8 | 0.0070 | 2026-10-13 | Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a | |
CVE-2026-88159 |
high | 8.8 | 0.0142 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta | |
CVE-2026-112896 |
high | 8.8 | 0.0047 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMa | |
CVE-2026-86929 |
high | 8.8 | 0.0065 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac | |
CVE-2026-50670 |
high | 8.8 | 0.0033 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-57094 |
high | 8.8 | 0.0082 | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to | |
CVE-2026-102225 |
high | 8.8 | 0.0089 | 2026-10-13 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a ne | |
CVE-2026-70254 |
high | 8.8 | 0.0089 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a | |
CVE-2026-105595 |
high | 8.8 | 0.0082 | 2026-10-13 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a | |
CVE-2026-105718 |
high | 8.8 | 0.0095 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a | |
CVE-2026-97755 |
high | 8.8 | 0.0080 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a | |
CVE-2025-11714 |
high | 8.8 | 0.0034 | 2025-10-14 | Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox | |
CVE-2026-5292 |
high | 8.8 | 0.0032 | 2026-04-01 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-7899 |
high | 8.8 | 0.0030 | 2026-05-06 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker | |
CVE-2026-7902 |
high | 8.8 | 0.0034 | 2026-05-06 | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker | |
CVE-2026-7995 |
high | 8.8 | 0.0022 | 2026-05-06 | Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to | |
CVE-2026-42216 |
high | 8.8 | 0.0046 | 2026-05-07 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-43909 |
high | 8.8 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-30802 |
high | 8.8 | 0.0025 | 2026-06-17 | Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. This | |
CVE-2026-13033 |
high | 8.8 | 0.0038 | 2026-06-24 | Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowe | |
CVE-2026-14422 |
high | 8.8 | 0.0037 | 2026-07-01 | Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-15114 |
high | 8.8 | 0.0032 | 2026-07-08 | Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote att | |
CVE-2026-10673 |
high | 8.8 | 0.0042 | 2026-07-15 | The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reasse | |
CVE-2026-15903 |
high | 8.8 | 0.0041 | 2026-07-20 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacke | |
CVE-2026-16002 |
high | 8.8 | 0.0043 | 2026-07-23 | The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to crash th | |
CVE-2026-17678 |
high | 8.8 | 0.0051 | 2026-07-30 | Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who ha | |
CVE-2026-17971 |
high | 8.8 | 0.0037 | 2026-07-30 | Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-62706 |
high | 8.8 | 0.0082 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute | |
CVE-2026-113233 |
high | 8.8 | 0.0042 | 2026-10-20 | Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote at | |
CVE-2025-40796 |
high | 8.7 | 0.0050 | 2025-09-09 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (Al | |
CVE-2025-40797 |
high | 8.7 | 0.0054 | 2025-09-09 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (Al | |
CVE-2025-40798 |
high | 8.7 | 0.0054 | 2025-09-09 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (Al | |
CVE-2026-33689 |
high | 8.7 | 0.0048 | 2026-04-17 | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability | |
CVE-2026-33317 |
high | 8.7 | 0.0019 | 2026-04-24 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-6918 |
high | 8.7 | 0.0052 | 2026-05-05 | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by | |
CVE-2026-43916 |
high | 8.7 | 0.0026 | 2026-05-12 | pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cg | |
CVE-2026-8686 |
high | 8.7 | 0.0039 | 2026-05-15 | Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT b | |
CVE-2026-58469 |
high | 8.7 | 0.0049 | 2026-07-07 | GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in | |
CVE-2026-11404 |
high | 8.7 | 0.0061 | 2026-07-09 | Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mg_t | |
CVE-2026-58662 |
high | 8.7 | 0.0108 | 2026-07-27 | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrif | |
CVE-2026-66729 |
high | 8.7 | 0.0078 | 2026-07-27 | facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body | |
CVE-2026-66731 |
high | 8.7 | 0.0078 | 2026-07-27 | facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked tran | |
CVE-2026-66360 |
high | 8.7 | 0.0049 | 2026-07-30 | The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mod | |
CVE-2026-71980 |
high | 8.7 | 0.0061 | 2026-08-17 | Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the d | |
CVE-2026-74238 |
high | 8.7 | 0.0048 | 2026-08-17 | TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpac | |
CVE-2026-62292 |
high | 8.7 | 0.0056 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted unco | |
CVE-2026-63383 |
high | 8.7 | 0.0049 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond | |
CVE-2026-76641 |
high | 8.7 | 0.0035 | 2026-08-20 | Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger me |