Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-109618 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code e | KEV 710 PoC |
CVE-2026-109619 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote cod | KEV |
CVE-2026-105733 |
high | 8.8 | 0.0038 | 2026-10-13 | Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. |