Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40454 |
high | 7.5 | 0.0049 | 2026-07-10 | Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bound | |
CVE-2026-59198 |
high | 7.5 | 0.0031 | 2026-07-14 | Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its | |
CVE-2026-62351 |
high | 7.5 | 0.0039 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, sour | |
CVE-2026-46600 |
high | 7.5 | 0.0055 | 2026-07-21 | Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the messa | |
CVE-2026-20479 |
high | 7.5 | 0.0071 | 2026-08-03 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r | |
CVE-2026-20346 |
high | 7.5 | 0.0054 | 2026-08-07 | A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attac | |
CVE-2026-20347 |
high | 7.5 | 0.0056 | 2026-08-07 | A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote at | |
CVE-2026-19082 |
high | 7.5 | 0.0037 | 2026-08-07 | Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over- | |
CVE-2026-18125 |
high | 7.5 | 0.0159 | 2026-08-11 | An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remot | |
CVE-2026-53587 |
high | 7.5 | 0.0047 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a | |
CVE-2026-102941 |
high | 7.5 | 0.0028 | 2026-10-16 | The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering a | |
CVE-2026-56386 |
high | 7.5 | 0.0073 | 2026-10-21 | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allow | |
CVE-2026-102486 |
high | 7.5 | 0.0055 | 2026-10-21 | Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote | |
CVE-2026-73261 |
high | 7.5 | 0.0035 | 2026-10-14 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack ena | |
CVE-2026-90869 |
high | 7.5 | — | 2026-10-29 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH s | |
CVE-2026-58011 |
high | 7.5 | 0.0047 | 2026-06-30 | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd | |
CVE-2026-10652 |
high | 7.4 | 0.0042 | 2026-06-30 | Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_ | |
CVE-2025-40811 |
high | 7.3 | 0.0014 | 2025-10-14 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Ed | |
CVE-2025-40812 |
high | 7.3 | 0.0014 | 2025-10-14 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Ed | |
CVE-2025-40936 |
high | 7.3 | 0.0020 | 2025-11-17 | A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0. | |
CVE-2026-43655 |
high | 7.3 | 0.0037 | 2026-05-11 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 a | |
CVE-2026-0131 |
high | 7.3 | 0.0007 | 2026-06-16 | In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. Thi | |
CVE-2026-59700 |
high | 7.3 | 0.0015 | 2026-08-11 | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected app | |
CVE-2026-59701 |
high | 7.3 | 0.0015 | 2026-08-11 | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected app | |
CVE-2026-93862 |
high | 7.2 | 0.0016 | 2026-10-27 | An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned | |
CVE-2026-70634 |
high | 7.2 | 0.0053 | 2026-08-06 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionar | |
CVE-2026-75146 |
high | 7.2 | 0.0026 | 2026-08-19 | FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec | |
CVE-2026-55192 |
high | 7.2 | 0.0045 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 deco | |
CVE-2023-53675 |
high | 7.1 | 0.0022 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_pt | |
CVE-2026-63920 |
high | 7.1 | 0.0017 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header | |
CVE-2026-17007 |
high | 7.1 | 0.0015 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive infor | |
CVE-2026-92925 |
high | 7.1 | 0.0071 | 2026-09-17 | A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, P | |
CVE-2026-98110 |
high | 7.1 | 0.0013 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmw | |
CVE-2026-98111 |
high | 7.1 | 0.0013 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate ve | |
CVE-2026-70126 |
high | 7.1 | 0.0052 | 2026-10-13 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code | |
CVE-2026-114043 |
high | 7.1 | 0.0040 | 2026-10-21 | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB sy | |
CVE-2026-96644 |
high | 7.1 | 0.0038 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unc | |
CVE-2026-58529 |
high | 7.1 | 0.0104 | 2026-07-14 | Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to | |
CVE-2026-50428 |
high | 7.1 | 0.0041 | 2026-07-14 | Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorize | |
CVE-2026-50682 |
high | 7.1 | 0.0093 | 2026-07-14 | Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a | |
CVE-2026-55122 |
high | 7.1 | 0.0053 | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-56193 |
high | 7.1 | 0.0050 | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local | |
CVE-2026-5673 |
high | 7.1 | 0.0018 | 2026-04-06 | A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AV | |
CVE-2026-5441 |
high | 7.1 | 0.0014 | 2026-04-09 | An out-of-bounds read vulnerability exists in the `DecodePsmctRle1` function of `DicomImageDecoder.c | |
CVE-2026-32188 |
high | 7.1 | 0.0041 | 2026-04-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-40917 |
high | 7.1 | 0.0017 | 2026-04-15 | A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function | |
CVE-2026-5720 |
high | 7.1 | 0.0067 | 2026-04-17 | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remot | |
CVE-2026-42446 |
high | 7.1 | 0.0012 | 2026-05-12 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-based out-of-b | |
CVE-2026-10658 |
high | 7.1 | 0.0028 | 2026-06-23 | bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timest | |
CVE-2026-47147 |
high | 7.1 | 0.0040 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of- |