Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-110264 |
critical | 10.0 | 0.0131 | 2026-10-22 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 b | |
CVE-2026-97229 |
critical | 10.0 | 0.1843 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 | KEV 5 PoC |
CVE-2026-83578 |
critical | 9.8 | 0.0109 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec | |
CVE-2025-49710 |
critical | 9.8 | 0.0074 | 2025-06-11 | An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerabil | |
CVE-2026-25208 |
critical | 9.8 | 0.0025 | 2026-04-13 | Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue af | |
CVE-2026-41144 |
critical | 9.8 | 0.0043 | 2026-04-22 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde | |
CVE-2026-57433 |
critical | 9.8 | 0.0047 | 2026-07-13 | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted S | |
CVE-2026-16369 |
critical | 9.8 | 0.0064 | 2026-07-21 | Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-16389 |
critical | 9.8 | 0.0064 | 2026-07-21 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerabilit | |
CVE-2026-16395 |
critical | 9.8 | 0.0062 | 2026-07-21 | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thund | |
CVE-2026-16402 |
critical | 9.8 | 0.0062 | 2026-07-21 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 an | |
CVE-2026-16408 |
critical | 9.8 | 0.0062 | 2026-07-21 | Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16280 |
critical | 9.8 | 0.0053 | 2026-07-24 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncatio | |
CVE-2026-43764 |
critical | 9.8 | 0.0059 | 2026-07-27 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequo | |
CVE-2026-64694 |
critical | 9.8 | 0.0059 | 2026-07-27 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequo | |
CVE-2026-16834 |
critical | 9.8 | 0.0062 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-16917 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17160 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2025-70290 |
critical | 9.8 | 0.0067 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS | |
CVE-2025-70293 |
critical | 9.8 | 0.0077 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in f | |
CVE-2026-113399 |
critical | 9.8 | 0.0018 | 2026-10-20 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 | |
CVE-2026-33471 |
critical | 9.6 | 0.0022 | 2026-04-22 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::ve | |
CVE-2026-17673 |
critical | 9.6 | 0.0034 | 2026-07-30 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had c | |
CVE-2026-17682 |
critical | 9.6 | 0.0051 | 2026-07-30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had | |
CVE-2026-17717 |
critical | 9.6 | 0.0051 | 2026-07-30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to poten | |
CVE-2026-17726 |
critical | 9.6 | 0.0034 | 2026-07-30 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-19001 |
critical | 9.5 | 0.0054 | 2026-08-12 | The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an app | |
CVE-2026-63940 |
critical | 9.3 | 0.0019 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O reque | |
CVE-2026-114595 |
critical | 9.3 | 0.0050 | 2026-10-27 | In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause | |
CVE-2026-16416 |
critical | 9.3 | 0.0013 | 2026-07-21 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to | |
CVE-2026-50161 |
critical | 9.3 | 0.0072 | 2026-08-18 | libre is a generic library for real-time communications with asynchronous input and output support. | |
CVE-2026-93866 |
critical | 9.2 | 0.0045 | 2026-10-27 | An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware O | |
CVE-2026-43629 |
critical | 9.2 | 0.0070 | 2026-08-06 | llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache st | |
CVE-2026-116014 |
critical | 9.2 | 0.0043 | 2026-10-24 | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() | |
CVE-2026-13221 |
critical | 9.1 | 0.0049 | 2026-07-13 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce s | |
CVE-2026-41521 |
critical | 9.1 | 0.0067 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerabili | |
CVE-2026-71479 |
critical | 9.1 | 0.0065 | 2026-08-17 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management sys | |
CVE-2026-18670 |
critical | 9.1 | 0.0053 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-55203 |
critical | 9.0 | 0.0033 | 2026-06-18 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fc | |
CVE-2026-70149 |
high | 8.8 | 0.0093 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs | |
CVE-2026-70258 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to | |
CVE-2026-64759 |
high | 8.8 | 0.0045 | 2026-10-26 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 | |
CVE-2026-111585 |
high | 8.8 | 0.0029 | 2026-10-27 | An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Cl | |
CVE-2026-114596 |
high | 8.8 | 0.0026 | 2026-10-27 | In EPICS Base release 7.0.10 and prior, an improper validation of message length values during proto | |
CVE-2026-62822 |
high | 8.8 | 0.0082 | 2026-08-11 | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over | |
CVE-2026-56194 |
high | 8.8 | 0.0091 | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate p | |
CVE-2026-56647 |
high | 8.8 | 0.0091 | 2026-07-14 | Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized | |
CVE-2026-57974 |
high | 8.8 | 0.0082 | 2026-07-03 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to | |
CVE-2026-58594 |
high | 8.8 | 0.0082 | 2026-07-14 | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a | |
CVE-2026-62816 |
high | 8.8 | 0.0053 | 2026-08-11 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at |