Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-41034 |
medium | 5.0 | 0.0029 | 2026-04-16 | ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conver | |
CVE-2026-43767 |
medium | 5.0 | 0.0015 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-72976 |
medium | 5.0 | 0.0051 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information lo | |
CVE-2026-67628 |
medium | 4.9 | 0.0080 | 2026-10-13 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-116726 |
medium | 4.8 | 0.0013 | 2026-10-26 | Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that | |
CVE-2026-116727 |
medium | 4.8 | 0.0013 | 2026-10-26 | gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that | |
CVE-2026-116729 |
medium | 4.8 | 0.0013 | 2026-10-26 | libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metad | |
CVE-2026-116732 |
medium | 4.8 | 0.0013 | 2026-10-26 | libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() | |
CVE-2026-56788 |
medium | 4.8 | 0.0017 | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when proces | |
CVE-2026-56374 |
medium | 4.8 | 0.0022 | 2026-07-08 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to | |
CVE-2026-12478 |
medium | 4.8 | 0.0024 | 2026-07-14 | The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside t | |
CVE-2026-75904 |
medium | 4.8 | 0.0019 | 2026-08-18 | libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The | |
CVE-2026-16866 |
medium | 4.8 | 0.0034 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-111678 |
medium | 4.8 | 0.0022 | 2026-10-16 | Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8Chr | |
CVE-2026-116142 |
medium | 4.8 | 0.0012 | 2026-10-25 | ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to | |
CVE-2026-56361 |
medium | 4.8 | 0.0013 | 2026-06-30 | ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bo | |
CVE-2026-56370 |
medium | 4.8 | 0.0018 | 2026-06-24 | ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsIma | |
CVE-2026-70063 |
medium | 4.7 | 0.0035 | 2026-10-13 | Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. | |
CVE-2026-69506 |
medium | 4.7 | 0.0035 | 2026-10-13 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa | |
CVE-2026-69974 |
medium | 4.7 | 0.0032 | 2026-10-13 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information l | |
CVE-2026-69483 |
medium | 4.7 | 0.0031 | 2026-09-08 | Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose informatio | |
CVE-2026-69895 |
medium | 4.7 | 0.0031 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information lo | |
CVE-2026-68849 |
medium | 4.7 | 0.0031 | 2026-09-08 | Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose inform | |
CVE-2026-68891 |
medium | 4.7 | 0.0031 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l | |
CVE-2026-49794 |
medium | 4.6 | 0.0047 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker | |
CVE-2026-88226 |
medium | 4.6 | 0.0051 | 2026-10-13 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform | |
CVE-2026-56391 |
medium | 4.6 | 0.0013 | 2026-07-24 | GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte inp | |
CVE-2026-22185 |
medium | 4.6 | 0.0015 | 2026-01-07 | OpenLDAP Lightning Memory-Mapped Database (LMDB) versions 0.9.14 before 0.9.34, prior to commit 8e1f | |
CVE-2026-69381 |
medium | 4.6 | 0.0047 | 2026-09-08 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform | |
CVE-2026-78452 |
medium | 4.6 | 0.0047 | 2026-09-08 | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to di | |
CVE-2026-78508 |
medium | 4.6 | 0.0047 | 2026-09-08 | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information | |
CVE-2026-35233 |
medium | 4.4 | 0.0011 | 2026-05-01 | An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an ou | |
CVE-2026-20488 |
medium | 4.4 | 0.0016 | 2026-08-03 | In display, there is a possible information disclosure due to a missing bounds check. This could lea | |
CVE-2026-20489 |
medium | 4.4 | 0.0016 | 2026-08-03 | In display, there is a possible information disclosure due to an integer overflow. This could lead t | |
CVE-2026-20490 |
medium | 4.4 | 0.0014 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to lo | |
CVE-2026-20496 |
medium | 4.4 | 0.0015 | 2026-08-03 | In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead | |
CVE-2026-107472 |
medium | 4.3 | 0.0012 | 2026-10-27 | An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs | |
CVE-2026-58496 |
medium | 4.3 | 0.0021 | 2026-10-27 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFN | |
CVE-2026-103393 |
medium | 4.3 | 0.0015 | 2026-10-28 | An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Rou | |
CVE-2026-7904 |
medium | 4.3 | 0.0019 | 2026-05-06 | Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to per | |
CVE-2026-7933 |
medium | 4.3 | 0.0018 | 2026-05-06 | Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to | |
CVE-2026-7983 |
medium | 4.3 | 0.0019 | 2026-05-06 | Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak | |
CVE-2026-47224 |
medium | 4.3 | 0.0019 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-12303 |
medium | 4.3 | 0.0022 | 2026-06-16 | Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This | |
CVE-2026-0130 |
medium | 4.3 | 0.0018 | 2026-06-16 | In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. | |
CVE-2026-0140 |
medium | 4.3 | 0.0018 | 2026-06-16 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This | |
CVE-2026-0157 |
medium | 4.3 | 0.0017 | 2026-06-16 | In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This co | |
CVE-2026-17772 |
medium | 4.3 | 0.0026 | 2026-07-30 | Out of bounds read in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to per | |
CVE-2026-12630 |
medium | 4.3 | 0.0026 | 2026-08-17 | Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds read in g | |
CVE-2026-12669 |
medium | 4.3 | 0.0016 | 2026-10-19 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malf |