Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40244 |
high | 8.4 | 0.0043 | 2026-04-21 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-40250 |
high | 8.4 | 0.0045 | 2026-04-21 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-57432 |
high | 8.4 | 0.0021 | 2026-07-13 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an i | |
CVE-2026-63926 |
high | 8.4 | 0.0019 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment | |
CVE-2026-69242 |
high | 8.4 | 0.0019 | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted | |
CVE-2026-43907 |
high | 8.3 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-58050 |
high | 8.3 | 0.0044 | 2026-06-28 | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsyste | |
CVE-2026-107324 |
high | 8.2 | 0.0023 | 2026-10-08 | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic | |
CVE-2026-118370 |
high | 8.2 | 0.0044 | 2026-10-28 | libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlpar | |
CVE-2026-59197 |
high | 8.2 | 0.0044 | 2026-07-14 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a n | |
CVE-2026-63925 |
high | 8.1 | 0.0035 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection a | |
CVE-2026-71331 |
high | 8.1 | 0.0071 | 2026-08-11 | Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized att | |
CVE-2026-70269 |
high | 8.1 | 0.0079 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-41416 |
high | 8.1 | 0.0028 | 2026-04-24 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, | |
CVE-2026-63893 |
high | 8.1 | 0.0039 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u | |
CVE-2026-63889 |
high | 8.1 | 0.0036 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen | |
CVE-2026-62886 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally | |
CVE-2026-18917 |
high | 7.8 | 0.0018 | 2026-08-20 | A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerabil | |
CVE-2026-70052 |
high | 7.8 | 0.0037 | 2026-10-13 | Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code l | |
CVE-2026-83828 |
high | 7.8 | 0.0035 | 2026-10-13 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p | |
CVE-2026-85908 |
high | 7.8 | 0.0042 | 2026-10-13 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile | |
CVE-2026-87702 |
high | 7.8 | 0.0035 | 2026-10-13 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to | |
CVE-2026-88118 |
high | 7.8 | 0.0041 | 2026-10-13 | Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an a | |
CVE-2026-58641 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally | |
CVE-2026-62751 |
high | 7.8 | 0.0033 | 2026-08-11 | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele | |
CVE-2026-63532 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l | |
CVE-2026-64898 |
high | 7.8 | 0.0047 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local | |
CVE-2026-64903 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l | |
CVE-2026-64911 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l | |
CVE-2026-49800 |
high | 7.8 | 0.0033 | 2026-07-14 | Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authori | |
CVE-2026-50306 |
high | 7.8 | 0.0033 | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
CVE-2026-50347 |
high | 7.8 | 0.0047 | 2026-07-14 | Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code local | |
CVE-2026-50435 |
high | 7.8 | 0.0033 | 2026-07-14 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local | |
CVE-2026-54109 |
high | 7.8 | 0.0033 | 2026-07-14 | Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker | |
CVE-2026-54115 |
high | 7.8 | 0.0033 | 2026-07-14 | Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate | |
CVE-2026-54124 |
high | 7.8 | 0.0047 | 2026-07-14 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code l | |
CVE-2026-55012 |
high | 7.8 | 0.0047 | 2026-07-14 | Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code | |
CVE-2026-55033 |
high | 7.8 | 0.0057 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute c | |
CVE-2026-55043 |
high | 7.8 | 0.0047 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute | |
CVE-2026-55048 |
high | 7.8 | 0.0047 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute | |
CVE-2026-56182 |
high | 7.8 | 0.0033 | 2026-07-14 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l | |
CVE-2026-58532 |
high | 7.8 | 0.0033 | 2026-07-14 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges | |
CVE-2026-61937 |
high | 7.8 | 0.0033 | 2026-08-11 | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileg | |
CVE-2026-62735 |
high | 7.8 | 0.0033 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l | 2 PoC |
CVE-2026-65814 |
high | 7.8 | 0.0033 | 2026-08-11 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate p | |
CVE-2026-96118 |
high | 7.8 | 0.0035 | 2026-10-13 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges lo | |
CVE-2026-96915 |
high | 7.8 | 0.0030 | 2026-10-13 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to eleva | |
CVE-2026-69354 |
high | 7.8 | 0.0038 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi | |
CVE-2026-69916 |
high | 7.8 | 0.0038 | 2026-10-13 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l | |
CVE-2026-69934 |
high | 7.8 | 0.0038 | 2026-10-13 | Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri |