Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2660)
CWE-79 (1928)
CWE-416 (1558)
CWE-862 (1259)
CWE-122 (1130)
CWE-89 (1124)
CWE-125 (1089)
CWE-22 (1052)
CWE-306 (873)
CWE-200 (871)
CWE-20 (832)
CWE-787 (739)
CWE-78 (728)
CWE-918 (712)
CWE-863 (671)
CWE-94 (660)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (512)
CWE-119 (507)
CWE-502 (494)
CWE-287 (456)
CWE-770 (453)
CWE-121 (446)
CWE-190 (420)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-69269 |
high | 7.8 | 0.0033 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to el | |
CVE-2026-111808 |
high | 7.7 | 0.0041 | 2026-10-21 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded | |
CVE-2026-49181 |
high | 7.5 | 0.0117 | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to ele | |
CVE-2026-102192 |
high | 7.5 | 0.0127 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker t | |
CVE-2026-83855 |
high | 7.5 | 0.0133 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to de | |
CVE-2026-40356 |
high | 7.5 | 0.0060 | 2026-04-28 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bound | |
CVE-2026-71202 |
high | 7.5 | 0.0046 | 2026-08-05 | The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source di | |
CVE-2026-16924 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-56386 |
high | 7.5 | 0.0073 | 2026-10-21 | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allow | |
CVE-2026-74755 |
high | 7.5 | 0.0020 | 2026-10-21 | An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms a | |
CVE-2026-66307 |
high | 7.5 | 0.0117 | 2026-09-08 | Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny | |
CVE-2026-49790 |
high | 7.3 | 0.0036 | 2026-07-14 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | |
CVE-2026-32149 |
high | 7.3 | 0.0032 | 2026-04-14 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. | |
CVE-2026-7424 |
high | 7.2 | 0.0022 | 2026-04-29 | Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allo | |
CVE-2026-103411 |
high | 7.1 | 0.0017 | 2026-10-28 | An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router al | |
CVE-2026-5720 |
high | 7.1 | 0.0067 | 2026-04-17 | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remot | |
CVE-2026-6914 |
high | 7.1 | 0.0026 | 2026-04-29 | Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of av | |
CVE-2026-57918 |
high | 7.1 | 0.0030 | 2026-06-26 | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_sock | |
CVE-2026-48029 |
high | 7.1 | 0.0036 | 2026-07-22 | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a he | |
CVE-2026-70633 |
high | 7.1 | 0.0051 | 2026-08-06 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in | |
CVE-2026-18687 |
high | 7.1 | 0.0023 | 2026-08-11 | MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate | |
CVE-2026-82947 |
high | 7.1 | 0.0017 | 2026-10-26 | SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicio | |
CVE-2026-111735 |
high | 7.1 | 0.0016 | 2026-10-29 | P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cy | |
CVE-2026-83676 |
high | 7.0 | 0.0028 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-69859 |
high | 7.0 | 0.0020 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) a | |
CVE-2026-7736 |
medium | 6.9 | 0.0045 | 2026-05-04 | A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the func | |
CVE-2026-58058 |
medium | 6.9 | 0.0145 | 2026-06-28 | Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_ge | |
CVE-2026-88143 |
medium | 6.7 | 0.0024 | 2026-10-13 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele | |
CVE-2026-62714 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62720 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62814 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62715 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62716 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62718 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62742 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-62745 |
medium | 6.5 | 0.0054 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to dis | |
CVE-2026-88195 |
medium | 6.5 | 0.0081 | 2026-10-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information o | |
CVE-2026-24077 |
medium | 6.5 | 0.0017 | 2026-08-04 | Information Disclosure when processing wireless network channel switch information with improperly f | |
CVE-2026-78453 |
medium | 6.5 | 0.0092 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unautho | |
CVE-2026-72947 |
medium | 6.4 | 0.0027 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker | |
CVE-2026-39314 |
medium | 6.2 | 0.0015 | 2026-04-07 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. | |
CVE-2026-34667 |
medium | 6.2 | 0.0025 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer | |
CVE-2026-34672 |
medium | 6.2 | 0.0026 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer | |
CVE-2026-7423 |
medium | 6.0 | 0.0022 | 2026-04-29 | Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and | |
CVE-2026-106437 |
medium | 5.9 | 0.0013 | 2026-10-08 | The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-by | |
CVE-2023-53679 |
medium | 5.5 | 0.0024 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an integer u | |
CVE-2026-50300 |
medium | 5.5 | 0.0040 | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose i | |
CVE-2026-96925 |
medium | 5.5 | 0.0044 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose inf | |
CVE-2026-39855 |
medium | 5.5 | 0.0014 | 2026-04-09 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an inte | |
CVE-2026-63868 |
medium | 5.5 | 0.0012 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer |