Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-111075 |
high | 8.7 | 0.0037 | 2026-10-21 | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field val | |
CVE-2026-110938 |
high | 8.7 | 0.0042 | 2026-10-21 | In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service | |
CVE-2026-53920 |
high | 8.7 | 0.0040 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 | |
CVE-2026-34588 |
high | 8.6 | 0.0048 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-10848 |
high | 8.6 | 0.0038 | 2026-08-02 | The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys | |
CVE-2026-33451 |
high | 8.5 | 0.0010 | 2026-04-30 | CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior t | |
CVE-2026-43628 |
high | 8.5 | 0.0023 | 2026-08-06 | llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerabili | |
CVE-2026-55045 |
high | 8.4 | 0.0045 | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | |
CVE-2026-32926 |
high | 8.4 | 0.0020 | 2026-04-01 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_lin | |
CVE-2026-32927 |
high | 8.4 | 0.0020 | 2026-04-01 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp | |
CVE-2026-32929 |
high | 8.4 | 0.0020 | 2026-04-01 | V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Ope | |
CVE-2026-12897 |
high | 8.4 | 0.0018 | 2026-06-25 | Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerab | |
CVE-2026-57432 |
high | 8.4 | 0.0021 | 2026-07-13 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an i | |
CVE-2026-45696 |
high | 8.3 | 0.0042 | 2026-06-18 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in t | |
CVE-2026-54058 |
high | 8.3 | 0.0052 | 2026-07-14 | Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA i | |
CVE-2026-77214 |
high | 8.3 | 0.0032 | 2026-10-07 | libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_Par | |
CVE-2026-85369 |
high | 8.2 | 0.0036 | 2026-10-13 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | |
CVE-2026-50429 |
high | 8.2 | 0.0107 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a | |
CVE-2026-24189 |
high | 8.2 | 0.0032 | 2026-04-21 | NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause | |
CVE-2026-28525 |
high | 8.2 | 0.0032 | 2026-04-23 | SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_mult | |
CVE-2026-17485 |
high | 8.2 | 0.0051 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain s | |
CVE-2026-65832 |
high | 8.2 | 0.0055 | 2026-08-17 | Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthe | |
CVE-2026-9535 |
high | 8.2 | — | 2026-10-29 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (ve | |
CVE-2026-56186 |
high | 8.1 | 0.0111 | 2026-07-14 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a | |
CVE-2026-83844 |
high | 8.1 | 0.0073 | 2026-10-13 | Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network. | |
CVE-2026-5282 |
high | 8.1 | 0.0025 | 2026-04-01 | Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker t | |
CVE-2026-33599 |
high | 8.1 | 0.0028 | 2026-04-22 | A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, whe | |
CVE-2026-7981 |
high | 8.1 | 0.0020 | 2026-05-06 | Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to ob | |
CVE-2026-9263 |
high | 8.1 | 0.0033 | 2026-06-30 | The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fai | |
CVE-2026-13819 |
high | 8.1 | 0.0040 | 2026-06-30 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-14011 |
high | 8.1 | 0.0033 | 2026-06-30 | Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-14090 |
high | 8.1 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 15 | |
CVE-2026-17869 |
high | 8.1 | 0.0033 | 2026-07-30 | Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to per | |
CVE-2026-17995 |
high | 8.1 | 0.0033 | 2026-07-30 | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perf | |
CVE-2026-58087 |
high | 7.8 | 0.0016 | 2026-08-19 | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dro | |
CVE-2026-17124 |
high | 7.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-70228 |
high | 7.8 | 0.0036 | 2026-10-13 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc | |
CVE-2026-70247 |
high | 7.8 | 0.0034 | 2026-10-13 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. | |
CVE-2026-83508 |
high | 7.8 | 0.0038 | 2026-10-13 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83567 |
high | 7.8 | 0.0038 | 2026-10-13 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83637 |
high | 7.8 | 0.0038 | 2026-10-13 | Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privilege | |
CVE-2026-83832 |
high | 7.8 | 0.0035 | 2026-10-13 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca | |
CVE-2026-85356 |
high | 7.8 | 0.0031 | 2026-10-13 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to eleva | |
CVE-2026-96862 |
high | 7.8 | 0.0031 | 2026-10-13 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca | |
CVE-2026-62733 |
high | 7.8 | 0.0033 | 2026-08-11 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
CVE-2026-62880 |
high | 7.8 | 0.0033 | 2026-08-11 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-64909 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut | |
CVE-2026-68814 |
high | 7.8 | 0.0047 | 2026-08-11 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally | |
CVE-2026-50388 |
high | 7.8 | 0.0047 | 2026-07-14 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. | |
CVE-2026-50399 |
high | 7.8 | 0.0033 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |