Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-115889 |
critical | 9.9 | 0.0045 | 2026-10-23 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend b | |
CVE-2026-96113 |
critical | 9.8 | 0.0087 | 2026-10-13 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a netw | |
CVE-2026-102225 |
high | 8.8 | 0.0089 | 2026-10-13 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a ne | |
CVE-2026-108450 |
high | 8.8 | 0.0062 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-108451 |
high | 8.8 | 0.0062 | 2026-10-15 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov | |
CVE-2026-73523 |
high | 8.7 | 0.0055 | 2026-08-17 | COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c tha | |
CVE-2026-70123 |
high | 7.8 | 0.0034 | 2026-10-13 | Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate pr | |
CVE-2026-70177 |
high | 7.8 | 0.0035 | 2026-10-13 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-62698 |
high | 7.8 | 0.0033 | 2026-08-11 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate | |
CVE-2026-63525 |
high | 7.8 | 0.0047 | 2026-08-11 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo | |
CVE-2026-68804 |
high | 7.8 | 0.0047 | 2026-08-11 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-49792 |
high | 7.8 | 0.0033 | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex | |
CVE-2026-50332 |
high | 7.8 | 0.0033 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc | |
CVE-2026-50357 |
high | 7.8 | 0.0033 | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex | |
CVE-2026-56650 |
high | 7.8 | 0.0033 | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate p | |
CVE-2026-62739 |
high | 7.8 | 0.0033 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l | |
CVE-2026-85796 |
high | 7.8 | 0.0031 | 2026-10-13 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-96995 |
high | 7.8 | 0.0031 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privil | |
CVE-2026-96280 |
high | 7.5 | 0.0050 | 2026-09-27 | The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functio | |
CVE-2026-19667 |
high | 7.5 | 0.0057 | 2026-09-16 | If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 b | |
CVE-2026-100201 |
high | 7.0 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevat | |
CVE-2026-62769 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-62881 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-62883 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-65795 |
medium | 6.7 | 0.0035 | 2026-08-11 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-65797 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-65798 |
medium | 6.7 | 0.0035 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
CVE-2023-36641 |
medium | 6.5 | 0.0136 | 2023-11-14 | A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, For | |
CVE-2026-55142 |
medium | 5.5 | 0.0060 | 2026-07-14 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose inform | |
CVE-2026-6039 |
medium | 5.4 | 0.0020 | 2026-06-15 | LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow exist | |
CVE-2026-77014 |
medium | 5.3 | 0.0023 | 2026-08-20 | A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator | |
CVE-2026-116742 |
medium | 4.8 | 0.0012 | 2026-10-26 | HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hf | |
CVE-2026-65610 |
low | 2.4 | 0.0016 | 2026-08-19 | nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attac | |
CVE-2026-116012 |
low | 2.0 | 0.0021 | 2026-10-24 | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and sk |