Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2660)
CWE-79 (1926)
CWE-416 (1558)
CWE-862 (1259)
CWE-122 (1130)
CWE-89 (1123)
CWE-125 (1089)
CWE-22 (1052)
CWE-306 (873)
CWE-200 (871)
CWE-20 (832)
CWE-787 (739)
CWE-78 (728)
CWE-918 (712)
CWE-863 (671)
CWE-94 (660)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (512)
CWE-119 (507)
CWE-502 (494)
CWE-287 (456)
CWE-770 (453)
CWE-121 (446)
CWE-190 (419)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-100222 |
critical | 9.8 | 0.0106 | 2026-10-13 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute | |
CVE-2026-83578 |
critical | 9.8 | 0.0106 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec | |
CVE-2026-83869 |
critical | 9.8 | 0.0082 | 2026-10-13 | Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code | |
CVE-2026-85806 |
critical | 9.8 | 0.0091 | 2026-10-13 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacke | |
CVE-2026-69824 |
critical | 9.8 | 0.0097 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to | |
CVE-2026-69276 |
critical | 9.8 | 0.0097 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor | |
CVE-2024-26828 |
critical | 9.4 | 0.0075 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_se | |
CVE-2026-63940 |
critical | 9.3 | 0.0019 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O reque | |
CVE-2026-33845 |
critical | 9.1 | 0.0207 | 2026-04-30 | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero off | |
CVE-2026-18670 |
critical | 9.1 | 0.0053 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-58016 |
critical | 9.1 | 0.0056 | 2026-06-30 | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gi | |
CVE-2026-16996 |
high | 8.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-85339 |
high | 8.8 | 0.0054 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-54982 |
high | 8.8 | 0.0053 | 2026-07-14 | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an una | |
CVE-2026-97004 |
high | 8.8 | 0.0086 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-97746 |
high | 8.8 | 0.0086 | 2026-10-13 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to | |
CVE-2026-97739 |
high | 8.8 | 0.0082 | 2026-10-13 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to | |
CVE-2026-30803 |
high | 8.8 | 0.0030 | 2026-06-17 | Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Ov | |
CVE-2026-45813 |
high | 8.8 | 0.0053 | 2026-07-24 | Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS serv | |
CVE-2026-71352 |
high | 8.8 | 0.0091 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authori | |
CVE-2026-43916 |
high | 8.7 | 0.0026 | 2026-05-12 | pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cg | |
CVE-2026-111075 |
high | 8.7 | 0.0037 | 2026-10-21 | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field val | |
CVE-2026-43628 |
high | 8.5 | 0.0023 | 2026-08-06 | llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerabili | |
CVE-2026-70388 |
high | 8.3 | 0.0021 | 2026-10-26 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can | |
CVE-2026-34064 |
high | 8.2 | 0.0027 | 2026-04-22 | nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to versio | |
CVE-2026-28525 |
high | 8.2 | 0.0032 | 2026-04-23 | SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_mult | |
CVE-2026-42268 |
high | 8.2 | 0.0040 | 2026-05-12 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS | |
CVE-2026-54890 |
high | 8.2 | 0.0042 | 2026-07-27 | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang | |
CVE-2026-63362 |
high | 8.2 | 0.0182 | 2026-07-30 | An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a re | |
CVE-2026-17485 |
high | 8.2 | 0.0051 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain s | |
CVE-2026-13308 |
high | 8.1 | 0.0078 | 2026-07-29 | Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. Th | |
CVE-2026-53178 |
high | 8.1 | 0.0040 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: a | |
CVE-2026-83838 |
high | 8.0 | 0.0055 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacke | |
CVE-2026-96844 |
high | 8.0 | 0.0053 | 2026-10-13 | Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker t | |
CVE-2026-68827 |
high | 8.0 | 0.0077 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate priv | |
CVE-2026-58087 |
high | 7.8 | 0.0016 | 2026-08-19 | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dro | |
CVE-2026-70064 |
high | 7.8 | 0.0038 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate | |
CVE-2026-83836 |
high | 7.8 | 0.0049 | 2026-10-13 | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code | |
CVE-2026-62741 |
high | 7.8 | 0.0033 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate | |
CVE-2026-64909 |
high | 7.8 | 0.0047 | 2026-08-11 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut | |
CVE-2026-50308 |
high | 7.8 | 0.0047 | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute co | |
CVE-2026-50388 |
high | 7.8 | 0.0047 | 2026-07-14 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. | |
CVE-2026-50498 |
high | 7.8 | 0.0036 | 2026-07-14 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | |
CVE-2026-55011 |
high | 7.8 | 0.0047 | 2026-07-14 | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to exec | |
CVE-2026-55039 |
high | 7.8 | 0.0047 | 2026-07-14 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to | |
CVE-2026-62696 |
high | 7.8 | 0.0033 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an | |
CVE-2026-63515 |
high | 7.8 | 0.0047 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | |
CVE-2026-27907 |
high | 7.8 | 0.0030 | 2026-04-14 | Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized att | |
CVE-2026-69421 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker t | |
CVE-2026-69687 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an au |