Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-55606 |
medium | 6.5 | 0.0038 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and | |
CVE-2026-20311 |
medium | 6.3 | 0.0025 | 2026-08-05 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authen | |
CVE-2026-112394 |
medium | 6.3 | 0.0056 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read pa | |
CVE-2026-50383 |
medium | 6.1 | 0.0040 | 2026-07-14 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose infor | |
CVE-2026-26169 |
medium | 6.1 | 0.0231 | 2026-04-14 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information loca | |
CVE-2026-68819 |
medium | 5.9 | 0.0098 | 2026-08-11 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over | |
CVE-2026-70234 |
medium | 5.5 | 0.0042 | 2026-10-13 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information loc | |
CVE-2026-83565 |
medium | 5.5 | 0.0046 | 2026-10-13 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose i | |
CVE-2026-83835 |
medium | 5.5 | 0.0089 | 2026-10-13 | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose | |
CVE-2026-85935 |
medium | 5.5 | 0.0039 | 2026-10-13 | Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally | |
CVE-2026-62730 |
medium | 5.5 | 0.0040 | 2026-08-11 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose infor | |
CVE-2026-62793 |
medium | 5.5 | 0.0040 | 2026-08-11 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | |
CVE-2026-50341 |
medium | 5.5 | 0.0040 | 2026-07-14 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | |
CVE-2026-50475 |
medium | 5.5 | 0.0037 | 2026-07-14 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. | |
CVE-2026-61347 |
medium | 5.5 | 0.0040 | 2026-08-11 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose informat | |
CVE-2026-62746 |
medium | 5.5 | 0.0040 | 2026-08-11 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. | |
CVE-2026-103567 |
medium | 5.5 | 0.0044 | 2026-10-13 | Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose inf | |
CVE-2026-69954 |
medium | 5.5 | 0.0046 | 2026-10-13 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc | |
CVE-2026-70041 |
medium | 5.5 | 0.0046 | 2026-10-13 | Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information loca | |
CVE-2026-83719 |
medium | 5.5 | 0.0040 | 2026-10-13 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo | |
CVE-2026-85835 |
medium | 5.5 | 0.0040 | 2026-10-13 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo | |
CVE-2026-85910 |
medium | 5.5 | 0.0044 | 2026-10-13 | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose informatio | |
CVE-2026-95904 |
medium | 5.5 | 0.0030 | 2026-10-13 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose informat | |
CVE-2026-96848 |
medium | 5.5 | 0.0039 | 2026-10-13 | Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informa | |
CVE-2026-96851 |
medium | 5.5 | 0.0039 | 2026-10-13 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose inf | |
CVE-2026-62353 |
medium | 5.4 | 0.0037 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, sour | |
CVE-2026-8463 |
medium | 5.3 | 0.0033 | 2026-05-13 | Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_ | |
CVE-2026-49854 |
medium | 5.3 | 0.0042 | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional | |
CVE-2026-55238 |
medium | 5.3 | 0.0052 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the | |
CVE-2026-65933 |
medium | 5.3 | 0.0025 | 2026-08-13 | A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive i | |
CVE-2026-65936 |
medium | 5.3 | 0.0025 | 2026-08-13 | A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially s | |
CVE-2026-40210 |
medium | 4.8 | 0.0074 | 2026-06-25 | An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitial | |
CVE-2026-61350 |
medium | 4.6 | 0.0047 | 2026-08-11 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a phys | |
CVE-2026-83788 |
medium | 4.6 | 0.0052 | 2026-10-13 | Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a phy | |
CVE-2026-50485 |
medium | 4.5 | 0.0066 | 2026-07-14 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n | |
CVE-2026-59840 |
medium | 4.3 | 0.0031 | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4. | |
CVE-2026-40341 |
low | 3.5 | 0.0019 | 2026-04-18 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of | |
CVE-2026-47088 |
low | 3.1 | 0.0027 | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in neste | |
CVE-2026-0930 |
low | 2.3 | 0.0017 | 2026-04-20 | Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. | |
CVE-2026-70652 |
low | 2.0 | 0.0014 | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips b | |
CVE-2026-50813 |
— | — | 0.0016 | 2026-07-08 | An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive i |