Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1128)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-87849 |
medium | 4.3 | 0.0035 | 2026-10-21 | The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object- | |
CVE-2026-93009 |
medium | 4.3 | 0.0020 | 2026-10-29 | A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a c | |
CVE-2026-100132 |
medium | 4.3 | 0.0044 | 2026-10-20 | Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of | |
CVE-2026-119272 |
medium | 4.3 | 0.0016 | 2026-10-30 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker t | |
CVE-2026-78455 |
medium | 4.3 | 0.0052 | 2026-09-08 | Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical a | |
CVE-2026-12548 |
medium | 4.2 | 0.0025 | 2026-07-21 | A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an intege | |
CVE-2026-0142 |
medium | 4.0 | 0.0007 | 2026-06-16 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input va | |
CVE-2026-50126 |
medium | 4.0 | 0.0018 | 2026-08-18 | Adaguc-server is an open source geographical information system to visualize, combine, compare and s | |
CVE-2026-114122 |
low | 3.9 | 0.0019 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C | |
CVE-2026-114124 |
low | 3.9 | 0.0019 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C | |
CVE-2026-11809 |
low | 3.7 | 0.0035 | 2026-08-10 | The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitiali | |
CVE-2026-114459 |
low | 3.7 | 0.0037 | 2026-10-22 | A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can ca | |
CVE-2026-115456 |
low | 3.7 | 0.0022 | 2026-10-30 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that | |
CVE-2026-108330 |
low | 3.6 | 0.0013 | 2026-10-27 | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | |
CVE-2026-118475 |
low | 3.6 | 0.0011 | 2026-10-30 | A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed co | |
CVE-2026-118608 |
low | 3.5 | 0.0015 | 2026-10-28 | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosur | |
CVE-2026-85498 |
low | 3.5 | 0.0026 | 2026-10-29 | A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error | |
CVE-2026-18278 |
low | 3.5 | 0.0024 | 2026-08-20 | Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability. This v | |
CVE-2026-18748 |
low | 3.5 | 0.0020 | 2026-10-21 | The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, | |
CVE-2026-104029 |
low | 3.3 | 0.0013 | 2026-10-05 | A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially cra | |
CVE-2026-16891 |
low | 3.3 | 0.0014 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive infor | |
CVE-2026-86874 |
low | 3.3 | 0.0015 | 2026-10-20 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. | |
CVE-2026-112922 |
low | 3.3 | 0.0014 | 2026-10-30 | A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a us | |
CVE-2026-7949 |
low | 3.1 | 0.0019 | 2026-05-06 | Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had | |
CVE-2026-8578 |
low | 3.1 | 0.0016 | 2026-05-14 | Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacke | |
CVE-2026-10684 |
low | 3.0 | 0.0014 | 2026-07-29 | In subsys/debug/coredump/coredump_shell.c, print_coredump_hdr() used the 16-bit tgt_code field of a | |
CVE-2026-0930 |
low | 2.3 | 0.0017 | 2026-04-20 | Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. | |
CVE-2026-33450 |
low | 2.3 | 0.0016 | 2026-04-30 | CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14 | |
CVE-2026-5314 |
low | 2.1 | 0.0069 | 2026-04-01 | A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_intern | |
CVE-2026-5315 |
low | 2.1 | 0.0052 | 2026-04-02 | A vulnerability was determined in Nothings stb up to 1.26. The affected element is the function stbt | |
CVE-2026-13522 |
low | 2.1 | 0.0051 | 2026-06-29 | A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this iss | |
CVE-2026-75090 |
low | 2.1 | 0.0069 | 2026-08-18 | A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the | |
CVE-2026-112073 |
low | 2.1 | 0.0024 | 2026-10-19 | A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affec | |
CVE-2026-56362 |
low | 2.1 | 0.0019 | 2026-07-08 | ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caus | |
CVE-2026-61862 |
low | 2.1 | 0.0010 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a p | |
CVE-2026-107157 |
low | 2.0 | 0.0015 | 2026-10-26 | Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds | |
CVE-2026-7233 |
low | 1.9 | 0.0024 | 2026-04-28 | A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function f | |
CVE-2026-8084 |
low | 1.9 | 0.0026 | 2026-05-07 | A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the funct | |
CVE-2026-8088 |
low | 1.9 | 0.0025 | 2026-05-07 | A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function | |
CVE-2026-17512 |
low | 1.9 | 0.0016 | 2026-07-27 | A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_s | |
CVE-2026-18790 |
low | 1.9 | 0.0016 | 2026-08-04 | A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac | |
CVE-2026-115801 |
low | 1.9 | 0.0011 | 2026-10-23 | A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function | |
CVE-2024-21950 |
low | 1.8 | 0.0009 | 2026-05-15 | An out of bounds read in the remote management firmware could allow a privileged attacker read a lim | |
CVE-2021-4034 |
— | — | 0.9492 | — | The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows | KEV |
CVE-2023-24552 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24554 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24556 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24557 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24558 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-25140 |
— | — | 0.0021 | 2023-02-14 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 ( |