Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2612)
CWE-79 (1785)
CWE-416 (1279)
CWE-862 (1161)
CWE-89 (1089)
CWE-22 (1005)
CWE-125 (861)
CWE-200 (838)
CWE-306 (831)
CWE-122 (821)
CWE-20 (786)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (601)
CWE-74 (599)
CWE-639 (533)
CWE-400 (512)
CWE-269 (499)
CWE-119 (494)
CWE-770 (429)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (320)
CWE-352 (271)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-44603 |
critical | 9.1 | 0.0034 | 2026-05-07 | Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026- | |
CVE-2026-97741 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-102857 |
high | 8.8 | 0.0090 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code | |
CVE-2026-108443 |
high | 8.8 | 0.0062 | 2026-10-15 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a net | |
CVE-2026-49127 |
high | 8.8 | 0.0051 | 2026-05-28 | Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in t | |
CVE-2026-7831 |
high | 7.6 | 0.0074 | 2026-07-01 | UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit m | |
CVE-2026-32605 |
high | 7.5 | 0.0046 | 2026-04-13 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the A | |
CVE-2026-12413 |
high | 7.5 | 0.0060 | 2026-07-02 | An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Contin | |
CVE-2026-14899 |
high | 7.5 | 0.0047 | 2026-07-22 | The code to parse MIME headers for display when forwarding a message (if the setting to view all hea | |
CVE-2026-58014 |
high | 7.3 | 0.0056 | 2026-06-30 | A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list fun | |
CVE-2026-6861 |
high | 7.1 | 0.0011 | 2026-04-22 | A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs proc | |
CVE-2026-58374 |
high | 7.1 | 0.0029 | 2026-06-30 | In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operati | |
CVE-2026-55564 |
high | 7.1 | 0.0033 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_ge | |
CVE-2026-56790 |
high | 7.0 | 0.0031 | 2026-06-25 | CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the | |
CVE-2026-63387 |
high | 7.0 | 0.0042 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-o | |
CVE-2026-116735 |
medium | 6.9 | 0.0013 | 2026-10-26 | libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries t | |
CVE-2026-56787 |
medium | 6.9 | 0.0056 | 2026-06-25 | RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 func | |
CVE-2026-115916 |
medium | 6.5 | 0.0031 | 2026-10-26 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/ | |
CVE-2026-50497 |
medium | 6.5 | 0.0092 | 2026-07-14 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose info | |
CVE-2026-66806 |
medium | 5.5 | 0.0043 | 2026-08-11 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information lo | |
CVE-2026-8357 |
medium | 5.4 | 0.0022 | 2026-06-15 | LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed w | |
CVE-2026-71391 |
medium | 5.3 | 0.0054 | 2026-08-10 | GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The share | |
CVE-2026-114460 |
medium | 5.3 | 0.0027 | 2026-10-22 | A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request bod | |
CVE-2026-12727 |
medium | 4.3 | 0.0022 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by | |
CVE-2026-44042 |
low | 3.7 | 0.0049 | 2026-07-01 | UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the Base64 decode helper used for | |
CVE-2026-44687 |
low | 3.7 | 0.0022 | 2026-07-22 | In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is bel |