Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1100)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (532)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-56758 |
medium | 6.9 | 0.0029 | 2026-07-30 | The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. | |
CVE-2026-61893 |
medium | 6.9 | 0.0046 | 2026-07-30 | A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes T | |
CVE-2026-63033 |
medium | 6.9 | 0.0046 | 2026-07-30 | A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body | |
CVE-2026-66349 |
medium | 6.9 | 0.0029 | 2026-07-30 | The MMS server connection handler contains a flaw in its processing of BER-encoded request data. Wh | |
CVE-2026-19027 |
medium | 6.9 | 0.0019 | 2026-08-06 | The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_a | |
CVE-2026-75147 |
medium | 6.9 | 0.0012 | 2026-08-19 | FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (libavformat/r | |
CVE-2026-110598 |
medium | 6.9 | 0.0017 | 2026-10-14 | Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value( | |
CVE-2026-111124 |
medium | 6.9 | 0.0024 | 2026-10-15 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unq | |
CVE-2026-111134 |
medium | 6.9 | 0.0013 | 2026-10-15 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_ | |
CVE-2026-111135 |
medium | 6.9 | 0.0020 | 2026-10-15 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_valu | |
CVE-2026-111149 |
medium | 6.9 | 0.0013 | 2026-10-15 | FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack3 | |
CVE-2026-111159 |
medium | 6.9 | 0.0013 | 2026-10-15 | libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attr | |
CVE-2026-111269 |
medium | 6.9 | 0.0013 | 2026-10-15 | libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in | |
CVE-2026-112020 |
medium | 6.9 | 0.0019 | 2026-10-18 | LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypes | |
CVE-2026-112273 |
medium | 6.9 | 0.0056 | 2026-10-19 | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns | |
CVE-2026-116744 |
medium | 6.9 | 0.0043 | 2026-10-26 | ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() | |
CVE-2026-119053 |
medium | 6.9 | — | 2026-10-29 | lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in s | |
CVE-2026-116725 |
medium | 6.8 | 0.0014 | 2026-10-26 | gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c tha | |
CVE-2026-116728 |
medium | 6.8 | 0.0014 | 2026-10-26 | libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metad | |
CVE-2026-116730 |
medium | 6.8 | 0.0014 | 2026-10-26 | Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in | |
CVE-2025-71439 |
medium | 6.8 | 0.0012 | 2026-10-27 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_ | |
CVE-2026-116841 |
medium | 6.8 | 0.0012 | 2026-10-27 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq l | |
CVE-2026-58528 |
medium | 6.8 | 0.0052 | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker | |
CVE-2026-83776 |
medium | 6.8 | 0.0051 | 2026-10-13 | Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileg | |
CVE-2026-2810 |
medium | 6.8 | 0.0012 | 2026-04-29 | Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Window | |
CVE-2026-3508 |
medium | 6.8 | 0.0014 | 2026-05-08 | An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a l | |
CVE-2026-53566 |
medium | 6.8 | 0.0018 | 2026-07-14 | Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affe | |
CVE-2026-47251 |
medium | 6.8 | 0.0016 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8 | |
CVE-2026-19028 |
medium | 6.8 | 0.0019 | 2026-08-06 | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksu | |
CVE-2026-111139 |
medium | 6.8 | 0.0013 | 2026-10-15 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() tha | |
CVE-2026-111164 |
medium | 6.8 | 0.0013 | 2026-10-15 | UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c | |
CVE-2026-111274 |
medium | 6.8 | 0.0020 | 2026-10-15 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/pars | |
CVE-2026-11822 |
medium | 6.8 | 0.0036 | 2026-06-09 | SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search exten | |
CVE-2026-41415 |
medium | 6.7 | 0.0031 | 2026-04-24 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, | |
CVE-2026-20447 |
medium | 6.7 | 0.0011 | 2026-05-04 | In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could | |
CVE-2026-73067 |
medium | 6.7 | 0.0013 | 2026-08-11 | Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through | |
CVE-2026-11743 |
medium | 6.6 | 0.0015 | 2026-08-07 | The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated the flash | |
CVE-2026-112629 |
medium | 6.5 | 0.0060 | 2026-10-26 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 | |
CVE-2026-112634 |
medium | 6.5 | 0.0058 | 2026-10-26 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 | |
CVE-2026-61918 |
medium | 6.5 | 0.0092 | 2026-08-11 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information | |
CVE-2026-61921 |
medium | 6.5 | 0.0092 | 2026-08-11 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information | |
CVE-2026-62714 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62720 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62782 |
medium | 6.5 | 0.0092 | 2026-08-11 | Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information ove | |
CVE-2026-62814 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-54126 |
medium | 6.5 | 0.0092 | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net | |
CVE-2026-55054 |
medium | 6.5 | 0.0092 | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information | |
CVE-2026-57979 |
medium | 6.5 | 0.0092 | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net | |
CVE-2026-58539 |
medium | 6.5 | 0.0092 | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net | |
CVE-2026-61924 |
medium | 6.5 | 0.0092 | 2026-08-11 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information |