Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1128)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-61618 |
medium | 6.9 | — | 2026-10-30 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs | |
CVE-2026-62335 |
medium | 6.9 | — | 2026-10-30 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before | |
CVE-2026-62337 |
medium | 6.9 | — | 2026-10-30 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mis | |
CVE-2024-6541 |
medium | 6.8 | 0.0034 | 2026-08-06 | The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are | |
CVE-2026-65834 |
medium | 6.8 | 0.0032 | 2026-07-30 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfig | |
CVE-2026-9031 |
medium | 6.8 | 0.0026 | 2026-08-07 | An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation | |
CVE-2026-21083 |
medium | 6.8 | 0.0026 | 2026-08-10 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to acc | |
CVE-2026-72711 |
medium | 6.8 | 0.0018 | 2026-08-24 | The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_ | |
CVE-2026-88089 |
medium | 6.7 | 0.0031 | 2026-10-13 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |
CVE-2026-60526 |
medium | 6.7 | 0.0015 | 2026-07-21 | Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are | |
CVE-2026-21060 |
medium | 6.7 | 0.0021 | 2026-08-10 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attack | |
CVE-2026-60613 |
medium | 6.6 | 0.0040 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (componen | |
CVE-2026-113913 |
medium | 6.5 | 0.0061 | 2026-10-26 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-88858 |
medium | 6.5 | 0.0034 | 2026-10-28 | A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math | |
CVE-2026-70105 |
medium | 6.5 | 0.0097 | 2026-08-20 | Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose infor | |
CVE-2026-102867 |
medium | 6.5 | 0.0099 | 2026-10-13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information | |
CVE-2026-105719 |
medium | 6.5 | 0.0109 | 2026-10-13 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose i | |
CVE-2026-85797 |
medium | 6.5 | 0.0091 | 2026-10-13 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net | |
CVE-2022-47924 |
medium | 6.5 | 0.0026 | 2023-03-27 | An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-li | |
CVE-2026-33882 |
medium | 6.5 | 0.0027 | 2026-03-27 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and | |
CVE-2026-20097 |
medium | 6.5 | 0.0041 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem | |
CVE-2026-5329 |
medium | 6.5 | 0.0046 | 2026-04-09 | Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in t | |
CVE-2026-32201 |
medium | 6.5 | 0.4338 | 2026-04-14 | Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unaut | KEV |
CVE-2026-22748 |
medium | 6.5 | 0.0020 | 2026-04-22 | Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtD | |
CVE-2026-24204 |
medium | 6.5 | 0.0036 | 2026-04-28 | NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation b | |
CVE-2026-1577 |
medium | 6.5 | 0.0034 | 2026-04-30 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 C | |
CVE-2026-20685 |
medium | 6.5 | 0.0027 | 2026-05-18 | An attacker in a privileged network position may be able to leak sensitive information. A path handl | |
CVE-2026-10651 |
medium | 6.5 | 0.0030 | 2026-06-23 | bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record b | |
CVE-2026-13816 |
medium | 6.5 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150.0. | |
CVE-2026-13847 |
medium | 6.5 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-13866 |
medium | 6.5 | 0.0030 | 2026-06-30 | Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a r | |
CVE-2026-13889 |
medium | 6.5 | 0.0032 | 2026-06-30 | Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 | |
CVE-2026-13893 |
medium | 6.5 | 0.0029 | 2026-06-30 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13900 |
medium | 6.5 | 0.0030 | 2026-06-30 | Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-13908 |
medium | 6.5 | 0.0024 | 2026-06-30 | Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 | |
CVE-2026-13917 |
medium | 6.5 | 0.0026 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-13921 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior t | |
CVE-2026-13924 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0.787 | |
CVE-2026-13926 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowe | |
CVE-2026-13962 |
medium | 6.5 | 0.0030 | 2026-06-30 | Insufficient data validation in PDF in Google Chrome prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13990 |
medium | 6.5 | 0.0026 | 2026-06-30 | Insufficient validation of untrusted input in DataTransfer in Google Chrome on Windows prior to 150. | |
CVE-2026-14021 |
medium | 6.5 | 0.0032 | 2026-06-30 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14022 |
medium | 6.5 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowe | |
CVE-2026-14023 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 a | |
CVE-2026-14065 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient validation of untrusted input in PageInfo in Google Chrome prior to 150.0.7871.47 allow | |
CVE-2026-14100 |
medium | 6.5 | 0.0029 | 2026-06-30 | Insufficient data validation in NetworkCache in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-14118 |
medium | 6.5 | 0.0030 | 2026-06-30 | Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-56151 |
medium | 6.5 | 0.0047 | 2026-07-01 | Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipula | |
CVE-2026-49086 |
medium | 6.5 | 0.0068 | 2026-07-06 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apa | |
CVE-2026-49097 |
medium | 6.5 | 0.0067 | 2026-07-06 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstrea |