Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1819)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (879)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (539)
CWE-400 (526)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-112404 |
high | 8.8 | 0.0044 | 2026-10-19 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode path | |
CVE-2026-53920 |
high | 8.7 | 0.0040 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 | |
CVE-2026-5260 |
high | 8.2 | 0.0077 | 2026-05-26 | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret dur | |
CVE-2026-64905 |
high | 7.8 | 0.0047 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
CVE-2026-50402 |
high | 7.8 | 0.0033 | 2026-07-14 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate | 1 PoC |
CVE-2026-50435 |
high | 7.8 | 0.0033 | 2026-07-14 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local | |
CVE-2026-55036 |
high | 7.8 | 0.0047 | 2026-07-14 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
CVE-2026-57968 |
high | 7.8 | 0.0033 | 2026-07-14 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges | |
CVE-2026-69884 |
high | 7.8 | 0.0038 | 2026-10-13 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69942 |
high | 7.8 | 0.0038 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. | |
CVE-2026-69950 |
high | 7.8 | 0.0038 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local | |
CVE-2026-69953 |
high | 7.8 | 0.0038 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local | |
CVE-2026-69957 |
high | 7.8 | 0.0038 | 2026-10-13 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr | |
CVE-2026-83727 |
high | 7.8 | 0.0036 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local | |
CVE-2026-21371 |
high | 7.8 | 0.0010 | 2026-04-06 | Memory Corruption when retrieving output buffer with insufficient size validation. | |
CVE-2026-21373 |
high | 7.8 | 0.0008 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processin | |
CVE-2026-21374 |
high | 7.8 | 0.0011 | 2026-04-06 | Memory Corruption when processing auxiliary sensor input/output control commands with insufficient b | |
CVE-2026-21375 |
high | 7.8 | 0.0008 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processin | |
CVE-2026-21376 |
high | 7.8 | 0.0010 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processin | |
CVE-2026-21378 |
high | 7.8 | 0.0008 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processin | |
CVE-2026-26184 |
high | 7.8 | 0.0024 | 2026-04-14 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privilege | |
CVE-2026-21379 |
high | 7.8 | 0.0010 | 2026-07-06 | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. | |
CVE-2026-21367 |
high | 7.5 | 0.0020 | 2026-04-06 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes durin | |
CVE-2026-21381 |
high | 7.5 | 0.0015 | 2026-04-06 | Transient DOS when receiving a service data frame with excessive length during device matching over | |
CVE-2026-34059 |
high | 7.5 | 0.0039 | 2026-05-04 | Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: throug | |
CVE-2026-53587 |
high | 7.5 | 0.0047 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a | |
CVE-2026-25288 |
high | 7.4 | 0.0016 | 2026-08-04 | Transient DOS when processing a short target wake time channel usage response frame with insufficien | |
CVE-2026-50372 |
high | 7.0 | 0.0026 | 2026-07-14 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate priv | |
CVE-2026-93524 |
medium | 6.9 | 0.0018 | 2026-10-28 | A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 cou | |
CVE-2026-41992 |
medium | 6.9 | 0.0062 | 2026-06-29 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by im | |
CVE-2026-55970 |
medium | 6.9 | 0.0077 | 2026-07-27 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: bef | |
CVE-2026-57185 |
medium | 6.5 | 0.0048 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-65794 |
medium | 6.5 | 0.0092 | 2026-08-11 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over | |
CVE-2026-50445 |
medium | 6.5 | 0.0092 | 2026-07-14 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a netwo | |
CVE-2026-50468 |
medium | 6.5 | 0.0100 | 2026-07-14 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | |
CVE-2026-50504 |
medium | 6.5 | 0.0092 | 2026-07-14 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information ov | |
CVE-2026-66312 |
medium | 6.5 | 0.0110 | 2026-08-03 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code ov | |
CVE-2026-69550 |
medium | 6.5 | 0.0092 | 2026-08-19 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information | |
CVE-2026-88195 |
medium | 6.5 | 0.0081 | 2026-10-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information o | |
CVE-2026-97828 |
medium | 6.5 | 0.0095 | 2026-10-13 | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. | |
CVE-2026-108454 |
medium | 6.5 | 0.0074 | 2026-10-15 | Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose informat | |
CVE-2026-83685 |
medium | 6.5 | 0.0129 | 2026-10-13 | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a netwo | |
CVE-2026-83888 |
medium | 6.5 | 0.0098 | 2026-10-13 | Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over | |
CVE-2026-88167 |
medium | 6.5 | 0.0086 | 2026-10-13 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information ov | |
CVE-2026-88201 |
medium | 6.5 | 0.0063 | 2026-10-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information o | |
CVE-2026-26155 |
medium | 6.5 | 0.0089 | 2026-04-14 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | |
CVE-2026-53414 |
medium | 6.5 | 0.0036 | 2026-08-11 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may al | |
CVE-2026-55606 |
medium | 6.5 | 0.0038 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and | |
CVE-2026-20311 |
medium | 6.3 | 0.0025 | 2026-08-05 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authen | |
CVE-2026-112394 |
medium | 6.3 | 0.0056 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read pa |