Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-11803 |
high | 7.8 | 0.0019 | 2026-08-06 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read | |
CVE-2026-107896 |
high | 7.8 | 0.0013 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile | |
CVE-2026-107897 |
high | 7.8 | 0.0013 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF | |
CVE-2026-107898 |
high | 7.8 | 0.0013 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditDat | |
CVE-2026-107899 |
high | 7.8 | 0.0013 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditDat | |
CVE-2026-107900 |
high | 7.8 | 0.0013 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile | |
CVE-2026-85888 |
high | 7.7 | 0.0080 | 2026-10-13 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-88081 |
high | 7.7 | 0.0080 | 2026-10-13 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ | |
CVE-2026-33516 |
high | 7.7 | 0.0043 | 2026-04-17 | xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerabili | |
CVE-2026-57077 |
high | 7.7 | 0.0019 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan i | |
CVE-2026-43820 |
high | 7.7 | 0.0011 | 2026-07-23 | NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSS | |
CVE-2026-16863 |
high | 7.7 | 0.0047 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive informa | |
CVE-2026-115484 |
high | 7.6 | 0.0022 | 2026-10-23 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calcu | |
CVE-2026-10680 |
high | 7.6 | 0.0016 | 2026-07-21 | The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/ | |
CVE-2026-69577 |
high | 7.5 | 0.0107 | 2026-10-13 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allo | |
CVE-2026-83795 |
high | 7.5 | 0.0127 | 2026-10-13 | Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service | |
CVE-2026-83843 |
high | 7.5 | 0.0127 | 2026-10-13 | Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker t | |
CVE-2026-85353 |
high | 7.5 | 0.0098 | 2026-10-13 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i | |
CVE-2026-96861 |
high | 7.5 | 0.0112 | 2026-10-13 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to de | |
CVE-2026-96866 |
high | 7.5 | 0.0112 | 2026-10-13 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to de | |
CVE-2026-50463 |
high | 7.5 | 0.0103 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a | |
CVE-2026-50470 |
high | 7.5 | 0.0103 | 2026-07-14 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose | |
CVE-2026-50496 |
high | 7.5 | 0.0117 | 2026-07-14 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose | |
CVE-2026-103569 |
high | 7.5 | 0.0111 | 2026-10-13 | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information | |
CVE-2026-70281 |
high | 7.5 | 0.0112 | 2026-10-13 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose informati | |
CVE-2026-96232 |
high | 7.5 | 0.0089 | 2026-10-13 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | |
CVE-2026-69454 |
high | 7.5 | 0.0109 | 2026-10-13 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allo | |
CVE-2026-83516 |
high | 7.5 | 0.0136 | 2026-10-13 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthori | |
CVE-2026-83635 |
high | 7.5 | 0.0133 | 2026-10-13 | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | |
CVE-2026-83647 |
high | 7.5 | 0.0130 | 2026-10-13 | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny servi | |
CVE-2026-83651 |
high | 7.5 | 0.0107 | 2026-10-13 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net | |
CVE-2026-83655 |
high | 7.5 | 0.0136 | 2026-10-13 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service ov | |
CVE-2026-83670 |
high | 7.5 | 0.0109 | 2026-10-13 | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disc | |
CVE-2026-83856 |
high | 7.5 | 0.0063 | 2026-10-13 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code | |
CVE-2026-85334 |
high | 7.5 | 0.0098 | 2026-10-13 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl | |
CVE-2026-85808 |
high | 7.5 | 0.0112 | 2026-10-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack | |
CVE-2026-96245 |
high | 7.5 | 0.0098 | 2026-10-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack | |
CVE-2026-96246 |
high | 7.5 | 0.0098 | 2026-10-13 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose inform | |
CVE-2026-5437 |
high | 7.5 | 0.0064 | 2026-04-09 | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM meta-header parsing. | |
CVE-2026-32605 |
high | 7.5 | 0.0046 | 2026-04-13 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the A | |
CVE-2026-6308 |
high | 7.5 | 0.0029 | 2026-04-15 | Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who c | |
CVE-2026-40890 |
high | 7.5 | 0.0035 | 2026-04-21 | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering | |
CVE-2026-28991 |
high | 7.5 | 0.0056 | 2026-05-11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 a | |
CVE-2026-12310 |
high | 7.5 | 0.0025 | 2026-06-16 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR | |
CVE-2026-12314 |
high | 7.5 | 0.0025 | 2026-06-16 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR | |
CVE-2026-0136 |
high | 7.5 | 0.0027 | 2026-06-16 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r | |
CVE-2026-5757 |
high | 7.5 | 0.0073 | 2026-06-26 | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine al | |
CVE-2026-54341 |
high | 7.5 | 0.0050 | 2026-06-26 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a craf | |
CVE-2026-56017 |
high | 7.5 | 0.0049 | 2026-06-29 | JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when th | |
CVE-2026-54592 |
high | 7.5 | 0.0033 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior |