Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2660)
CWE-79 (1926)
CWE-416 (1558)
CWE-862 (1259)
CWE-122 (1130)
CWE-89 (1123)
CWE-125 (1089)
CWE-22 (1052)
CWE-306 (873)
CWE-200 (871)
CWE-20 (832)
CWE-787 (739)
CWE-78 (728)
CWE-918 (712)
CWE-863 (671)
CWE-94 (660)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (512)
CWE-119 (507)
CWE-502 (494)
CWE-287 (456)
CWE-770 (453)
CWE-121 (446)
CWE-190 (419)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-69298 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate | |
CVE-2026-69407 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate pri | |
CVE-2026-69584 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate | |
CVE-2026-69707 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized | |
CVE-2026-69738 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate | |
CVE-2026-70572 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate | |
CVE-2026-70581 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate | |
CVE-2026-72990 |
high | 7.8 | 0.0033 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri | |
CVE-2026-72995 |
high | 7.8 | 0.0033 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri | |
CVE-2026-73002 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate | |
CVE-2026-81949 |
high | 7.8 | 0.0047 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute | |
CVE-2026-81959 |
high | 7.8 | 0.0047 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-84000 |
high | 7.8 | 0.0033 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute | |
CVE-2026-68832 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l | |
CVE-2026-69594 |
high | 7.8 | 0.0033 | 2026-09-08 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize | |
CVE-2026-69608 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker t | |
CVE-2026-95619 |
high | 7.7 | 0.0044 | 2026-09-22 | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the ali | |
CVE-2026-6682 |
high | 7.6 | 0.0032 | 2026-07-01 | In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= f | |
CVE-2026-63869 |
high | 7.6 | 0.0026 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected | |
CVE-2026-100208 |
high | 7.5 | 0.0045 | 2026-09-25 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut | |
CVE-2025-66969 |
high | 7.5 | 0.0034 | 2026-10-16 | Integer overflow in OpenModSim (<=1.11.0), leading to denial of service | |
CVE-2026-102834 |
high | 7.5 | 0.0050 | 2026-10-16 | JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, | |
CVE-2026-104016 |
high | 7.5 | 0.0068 | 2026-10-28 | ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) | |
CVE-2026-110747 |
high | 7.5 | 0.0039 | 2026-10-28 | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an | |
CVE-2026-103410 |
high | 7.5 | 0.0032 | 2026-10-28 | An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart R | |
CVE-2026-59117 |
high | 7.5 | 0.0061 | 2026-07-16 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code o | |
CVE-2026-105715 |
high | 7.5 | 0.0061 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute c | |
CVE-2026-35092 |
high | 7.5 | 0.0101 | 2026-04-01 | A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity va | |
CVE-2026-24173 |
high | 7.5 | 0.0052 | 2026-04-07 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash | |
CVE-2026-40046 |
high | 7.5 | 0.0037 | 2026-04-09 | Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveM | |
CVE-2026-40447 |
high | 7.5 | 0.0017 | 2026-04-13 | Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavi | |
CVE-2026-32316 |
high | 7.5 | 0.0079 | 2026-04-13 | jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 | |
CVE-2026-41254 |
high | 7.5 | 0.0036 | 2026-04-18 | Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow | |
CVE-2026-6773 |
high | 7.5 | 0.0032 | 2026-04-21 | Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was | |
CVE-2026-32952 |
high | 7.5 | 0.0103 | 2026-04-24 | go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0 | |
CVE-2026-33662 |
high | 7.5 | 0.0040 | 2026-04-24 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-33666 |
high | 7.5 | 0.0033 | 2026-04-24 | Zserio is a framework for serializing structured data with a compact and efficient way with low over | |
CVE-2026-28952 |
high | 7.5 | 0.0080 | 2026-05-11 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 | |
CVE-2026-48933 |
high | 7.5 | 0.0371 | 2026-06-26 | A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` | |
CVE-2026-53482 |
high | 7.5 | 0.0048 | 2026-07-08 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-59199 |
high | 7.5 | 0.0039 | 2026-07-14 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger | |
CVE-2026-20339 |
high | 7.5 | 0.0056 | 2026-08-07 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote at | |
CVE-2026-50142 |
high | 7.5 | 0.0066 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF | |
CVE-2026-16852 |
high | 7.5 | 0.0055 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-17159 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-69329 |
high | 7.5 | 0.0117 | 2026-09-08 | Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. | |
CVE-2026-67376 |
high | 7.5 | 0.0117 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a | |
CVE-2026-69631 |
high | 7.5 | 0.0117 | 2026-09-08 | Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a | |
CVE-2026-73086 |
high | 7.4 | 0.0030 | 2026-08-11 | nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.1 | |
CVE-2026-52834 |
high | 7.3 | 0.0017 | 2026-08-19 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a cr |