Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1099)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47148 |
high | 7.1 | 0.0044 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads pa | |
CVE-2026-47149 |
high | 7.1 | 0.0044 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger ou | |
CVE-2026-47154 |
high | 7.1 | 0.0044 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds re | |
CVE-2026-4526 |
high | 7.1 | 0.0044 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in fr | |
CVE-2026-13705 |
high | 7.1 | 0.0018 | 2026-07-06 | Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SG | |
CVE-2026-64014 |
high | 7.1 | 0.0013 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp N | |
CVE-2026-48029 |
high | 7.1 | 0.0036 | 2026-07-22 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a he | |
CVE-2026-64833 |
high | 7.1 | 0.0040 | 2026-07-22 | FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer | |
CVE-2026-13077 |
high | 7.1 | 0.0042 | 2026-07-22 | A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out | |
CVE-2026-65918 |
high | 7.1 | 0.0044 | 2026-07-23 | PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vul | |
CVE-2026-64237 |
high | 7.1 | 0.0012 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firm | |
CVE-2026-43747 |
high | 7.1 | 0.0017 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequ | |
CVE-2026-63550 |
high | 7.1 | 0.0044 | 2026-07-30 | The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within co | |
CVE-2026-65421 |
high | 7.1 | 0.0029 | 2026-07-30 | The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attack | |
CVE-2026-69244 |
high | 7.1 | 0.0053 | 2026-08-03 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an | |
CVE-2026-70633 |
high | 7.1 | 0.0051 | 2026-08-06 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in | |
CVE-2026-70635 |
high | 7.1 | 0.0044 | 2026-08-06 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability th | |
CVE-2026-18688 |
high | 7.1 | 0.0040 | 2026-08-11 | An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an o | |
CVE-2026-18694 |
high | 7.1 | 0.0040 | 2026-08-11 | An issue in MongoDB Server's geospatial query processing could allow an authenticated user with writ | |
CVE-2026-55564 |
high | 7.1 | 0.0033 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_ge | |
CVE-2026-112278 |
high | 7.1 | 0.0031 | 2026-10-19 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in | |
CVE-2026-115486 |
high | 7.1 | 0.0021 | 2026-10-23 | A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler access | |
CVE-2026-82947 |
high | 7.1 | 0.0017 | 2026-10-26 | SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicio | |
CVE-2026-113912 |
high | 7.1 | 0.0022 | 2026-10-26 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iO | |
CVE-2026-111734 |
high | 7.1 | — | 2026-10-29 | P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before | |
CVE-2026-111735 |
high | 7.1 | — | 2026-10-29 | P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cy | |
CVE-2026-62728 |
high | 7.0 | 0.0020 | 2026-08-11 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an | |
CVE-2026-50491 |
high | 7.0 | 0.0028 | 2026-07-14 | Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege | |
CVE-2026-54111 |
high | 7.0 | 0.0020 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-54996 |
high | 7.0 | 0.0020 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-96209 |
high | 7.0 | 0.0028 | 2026-10-13 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privilege | |
CVE-2026-83694 |
high | 7.0 | 0.0029 | 2026-10-13 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to eleva | |
CVE-2026-85853 |
high | 7.0 | 0.0025 | 2026-10-13 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l | |
CVE-2026-111147 |
medium | 6.9 | 0.0013 | 2026-10-15 | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record | |
CVE-2024-58397 |
medium | 6.9 | 0.0020 | 2026-10-15 | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows a | |
CVE-2026-114041 |
medium | 6.9 | 0.0032 | 2026-10-21 | FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_me | |
CVE-2026-114044 |
medium | 6.9 | 0.0025 | 2026-10-21 | FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that al | |
CVE-2026-116736 |
medium | 6.9 | 0.0013 | 2026-10-26 | Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values | |
CVE-2024-58399 |
medium | 6.9 | 0.0012 | 2026-10-27 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allow | |
CVE-2026-117557 |
medium | 6.9 | 0.0013 | 2026-10-27 | SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_ | |
CVE-2026-34941 |
medium | 6.9 | 0.0038 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contain | |
CVE-2026-39979 |
medium | 6.9 | 0.0056 | 2026-04-13 | jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the | |
CVE-2026-7737 |
medium | 6.9 | 0.0063 | 2026-05-04 | A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMP | |
CVE-2026-56099 |
medium | 6.9 | 0.0050 | 2026-06-18 | OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_ | |
CVE-2026-9267 |
medium | 6.9 | 0.0027 | 2026-06-29 | Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds re | |
CVE-2026-60140 |
medium | 6.9 | 0.0015 | 2026-07-16 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger ke | |
CVE-2026-57896 |
medium | 6.9 | 0.0015 | 2026-07-16 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger ke | |
CVE-2026-45382 |
medium | 6.9 | 0.0043 | 2026-07-21 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decode | |
CVE-2026-45383 |
medium | 6.9 | 0.0043 | 2026-07-21 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a | |
CVE-2026-58023 |
medium | 6.9 | 0.0102 | 2026-07-27 | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift |