Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47223 |
medium | 5.4 | 0.0022 | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 | |
CVE-2026-6045 |
medium | 5.4 | 0.0021 | 2026-06-15 | LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow exi | |
CVE-2026-4985 |
medium | 5.3 | 0.0050 | 2026-03-27 | A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function c | |
CVE-2026-39886 |
medium | 5.3 | 0.0030 | 2026-04-21 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-6783 |
medium | 5.3 | 0.0023 | 2026-04-21 | Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnera | |
CVE-2026-40448 |
medium | 5.3 | 0.0012 | 2026-04-22 | Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory a | |
CVE-2026-7828 |
medium | 5.3 | 0.0135 | 2026-07-01 | UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In | |
CVE-2026-14391 |
medium | 5.3 | 0.0023 | 2026-07-01 | Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-13063 |
medium | 5.3 | 0.0040 | 2026-07-22 | An authenticated user with standard read/write privileges can cause the mongod process to terminate | |
CVE-2026-71392 |
medium | 5.3 | 0.0067 | 2026-08-10 | GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() functio | |
CVE-2026-71393 |
medium | 5.3 | 0.0067 | 2026-08-10 | GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. | |
CVE-2026-68552 |
medium | 5.3 | 0.0052 | 2026-08-19 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthentic | |
CVE-2026-103634 |
medium | 5.3 | 0.0049 | 2026-10-22 | Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (rep | |
CVE-2026-40469 |
medium | 5.1 | 0.0021 | 2026-07-13 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine) | |
CVE-2026-16554 |
medium | 5.1 | 0.0037 | 2026-07-27 | cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on | |
CVE-2026-39811 |
medium | 4.9 | 0.0037 | 2026-04-14 | A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7. | |
CVE-2026-33611 |
medium | 4.9 | 0.0042 | 2026-04-22 | An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS | |
CVE-2026-56363 |
medium | 4.8 | 0.0011 | 2026-06-30 | ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing | |
CVE-2026-50310 |
medium | 4.7 | 0.0031 | 2026-07-14 | Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to d | |
CVE-2026-0140 |
medium | 4.3 | 0.0018 | 2026-06-16 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This | |
CVE-2026-15108 |
medium | 4.3 | 0.0020 | 2026-07-08 | Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who | |
CVE-2026-42798 |
medium | 4.0 | 0.0013 | 2026-04-30 | Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c. | |
CVE-2026-105923 |
medium | 4.0 | 0.0012 | 2026-10-21 | A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in | |
CVE-2026-53763 |
low | 3.8 | 0.0019 | 2026-07-06 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-118775 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-16890 |
low | 3.6 | 0.0011 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive infor | |
CVE-2026-6103 |
low | 3.3 | 0.0016 | 2026-09-25 | phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check | |
CVE-2026-19167 |
low | 3.1 | 0.0023 | 2026-08-06 | Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had c | |
CVE-2026-40468 |
low | 2.1 | 0.0020 | 2026-07-13 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may le | |
CVE-2026-53910 |
low | 2.1 | 0.0033 | 2026-07-22 | diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed i | |
CVE-2026-116153 |
low | 2.0 | 0.0012 | 2026-10-25 | ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that all | |
CVE-2026-6192 |
low | 1.9 | 0.0011 | 2026-04-13 | A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_i | |
CVE-2026-14757 |
low | 1.9 | 0.0021 | 2026-07-05 | A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal | |
CVE-2026-14758 |
low | 1.9 | 0.0019 | 2026-07-05 | A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the func | |
CVE-2026-14761 |
low | 1.9 | 0.0019 | 2026-07-05 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is | |
CVE-2026-14786 |
low | 1.9 | 0.0019 | 2026-07-06 | A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_st | |
CVE-2026-14787 |
low | 1.9 | 0.0021 | 2026-07-06 | A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print | |
CVE-2026-111496 |
— | — | 0.0020 | 2026-10-28 | Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() compu | |
CVE-2023-21823 |
— | — | 0.0556 | — | Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege | KEV |
CVE-2026-4775 |
— | — | 0.0057 | 2026-03-24 | A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow v | |
CVE-2026-5732 |
— | — | 0.0035 | 2026-04-07 | Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability | |
CVE-2026-41602 |
— | — | 0.0116 | 2026-04-28 | Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implement | |
CVE-2026-41605 |
— | — | 0.0093 | 2026-04-28 | Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: be | |
CVE-2026-41142 |
— | — | 0.0044 | 2026-05-07 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-35433 |
— | — | 0.0077 | 2026-05-12 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | |
CVE-2026-44673 |
— | — | 0.0063 | 2026-05-14 | libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parse | |
CVE-2025-48595 |
— | — | 0.0195 | — | Android Framework contains an integer overflow vulnerability that allows for code execution that cou | KEV |
CVE-2026-65346 |
— | — | 0.0059 | 2026-08-17 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 | |
CVE-2026-43788 |
— | — | 0.0015 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golde | |
CVE-2026-65390 |
— | — | 0.0041 | 2026-09-14 | An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6 |