Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-85363 |
high | 8.8 | 0.0086 | 2026-10-13 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileg | |
CVE-2026-88163 |
high | 8.8 | 0.0095 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu | |
CVE-2026-88166 |
high | 8.8 | 0.0095 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu | |
CVE-2026-88186 |
high | 8.8 | 0.0086 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-96914 |
high | 8.8 | 0.0033 | 2026-10-13 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth | |
CVE-2026-102856 |
high | 8.8 | 0.0089 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code | |
CVE-2026-108400 |
high | 8.8 | 0.0091 | 2026-10-13 | Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker t | |
CVE-2026-69521 |
high | 8.8 | 0.0080 | 2026-10-13 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over | |
CVE-2026-70257 |
high | 8.8 | 0.0091 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co | |
CVE-2026-83688 |
high | 8.8 | 0.0095 | 2026-10-13 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code | |
CVE-2026-83725 |
high | 8.8 | 0.0078 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to | |
CVE-2026-88145 |
high | 8.8 | 0.0074 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-96943 |
high | 8.8 | 0.0060 | 2026-10-13 | Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to exe | |
CVE-2026-97753 |
high | 8.8 | 0.0080 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-97778 |
high | 8.8 | 0.0060 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute | |
CVE-2025-10533 |
high | 8.8 | 0.0078 | 2025-09-16 | Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115. | |
CVE-2026-26178 |
high | 8.8 | 0.0042 | 2026-04-14 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized att | |
CVE-2026-43908 |
high | 8.8 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-43909 |
high | 8.8 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-0148 |
high | 8.8 | 0.0028 | 2026-06-16 | In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due | |
CVE-2026-0151 |
high | 8.8 | 0.0023 | 2026-06-16 | In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflo | |
CVE-2026-0161 |
high | 8.8 | 0.0023 | 2026-06-16 | In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer | |
CVE-2026-14430 |
high | 8.8 | 0.0041 | 2026-07-01 | Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute | |
CVE-2026-64313 |
high | 8.8 | 0.0036 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflo | |
CVE-2026-17705 |
high | 8.8 | 0.0041 | 2026-07-30 | Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to exec | |
CVE-2026-19174 |
high | 8.8 | 0.0041 | 2026-08-06 | Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute | |
CVE-2026-62357 |
high | 8.8 | 0.0052 | 2026-08-18 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.IN | |
CVE-2026-88077 |
high | 8.8 | — | 2026-10-29 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to | |
CVE-2026-116591 |
high | 8.7 | 0.0033 | 2026-10-26 | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming | |
CVE-2026-41445 |
high | 8.7 | 0.0029 | 2026-04-20 | KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() | |
CVE-2026-54417 |
high | 8.7 | 0.0042 | 2026-06-17 | An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remot | |
CVE-2026-8805 |
high | 8.7 | 0.0064 | 2026-06-19 | Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELS | |
CVE-2026-12244 |
high | 8.7 | 0.0049 | 2026-06-25 | If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR co | |
CVE-2026-7838 |
high | 8.7 | 0.0187 | 2026-07-01 | UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in th | |
CVE-2026-55969 |
high | 8.7 | 0.0103 | 2026-07-27 | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Ha | |
CVE-2026-63559 |
high | 8.7 | 0.0070 | 2026-07-30 | An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a | |
CVE-2026-65423 |
high | 8.7 | 0.0080 | 2026-07-30 | An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a | |
CVE-2026-73564 |
high | 8.7 | 0.0052 | 2026-08-13 | frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/ | |
CVE-2026-55191 |
high | 8.7 | 0.0062 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients th | |
CVE-2026-63384 |
high | 8.7 | 0.0052 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrec | |
CVE-2026-111074 |
high | 8.7 | 0.0042 | 2026-10-21 | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentic | |
CVE-2026-34588 |
high | 8.6 | 0.0048 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-116724 |
high | 8.5 | 0.0015 | 2026-10-26 | FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that caus | |
CVE-2026-69419 |
high | 8.5 | 0.0074 | 2026-08-20 | Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to exe | |
CVE-2026-43627 |
high | 8.5 | 0.0020 | 2026-08-06 | llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_in | |
CVE-2026-70638 |
high | 8.5 | 0.0023 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android | |
CVE-2026-110247 |
high | 8.4 | 0.0018 | 2026-10-13 | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow ch | |
CVE-2026-34544 |
high | 8.4 | 0.0025 | 2026-04-01 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-34545 |
high | 8.4 | 0.0063 | 2026-04-01 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-34589 |
high | 8.4 | 0.0042 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto |