Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-8013 |
medium | 4.3 | 0.0016 | 2026-05-06 | Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed | |
CVE-2026-28917 |
medium | 4.3 | 0.0030 | 2026-05-11 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7 | |
CVE-2026-8528 |
medium | 4.3 | 0.0020 | 2026-05-14 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 | |
CVE-2026-13865 |
medium | 4.3 | 0.0024 | 2026-06-30 | Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 all | |
CVE-2026-13959 |
medium | 4.3 | 0.0025 | 2026-06-30 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13991 |
medium | 4.3 | 0.0022 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-13995 |
medium | 4.3 | 0.0024 | 2026-06-30 | Insufficient validation of untrusted input in Autofill in Google Chrome on Android prior to 150.0.78 | |
CVE-2026-13999 |
medium | 4.3 | 0.0019 | 2026-06-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 all | |
CVE-2026-14020 |
medium | 4.3 | 0.0024 | 2026-06-30 | Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14045 |
medium | 4.3 | 0.0026 | 2026-06-30 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowe | |
CVE-2026-14066 |
medium | 4.3 | 0.0029 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-14073 |
medium | 4.3 | 0.0023 | 2026-06-30 | Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14080 |
medium | 4.3 | 0.0023 | 2026-06-30 | Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0 | |
CVE-2026-14089 |
medium | 4.3 | 0.0024 | 2026-06-30 | Insufficient validation of untrusted input in PopupBlocker in Google Chrome prior to 150.0.7871.47 a | |
CVE-2026-14116 |
medium | 4.3 | 0.0026 | 2026-06-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allow | |
CVE-2026-14127 |
medium | 4.3 | 0.0024 | 2026-06-30 | Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14130 |
medium | 4.3 | 0.0024 | 2026-06-30 | Incorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allowed a remote attacker t | |
CVE-2026-14140 |
medium | 4.3 | 0.0024 | 2026-06-30 | Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871. | |
CVE-2026-15124 |
medium | 4.3 | 0.0027 | 2026-07-08 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remo | |
CVE-2026-15131 |
medium | 4.3 | 0.0027 | 2026-07-08 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote | |
CVE-2026-62659 |
medium | 4.3 | 0.0024 | 2026-07-14 | A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already l | |
CVE-2026-17700 |
medium | 4.3 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17706 |
medium | 4.3 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922. | |
CVE-2026-17767 |
medium | 4.3 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.792 | |
CVE-2026-17769 |
medium | 4.3 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-17773 |
medium | 4.3 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-17794 |
medium | 4.3 | 0.0024 | 2026-07-30 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922 | |
CVE-2026-17795 |
medium | 4.3 | 0.0034 | 2026-07-30 | Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17844 |
medium | 4.3 | 0.0016 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-17870 |
medium | 4.3 | 0.0016 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-17901 |
medium | 4.3 | 0.0023 | 2026-07-30 | Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.792 | |
CVE-2026-17934 |
medium | 4.3 | 0.0025 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17937 |
medium | 4.3 | 0.0025 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17939 |
medium | 4.3 | 0.0023 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17955 |
medium | 4.3 | 0.0024 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17970 |
medium | 4.3 | 0.0019 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17982 |
medium | 4.3 | 0.0025 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-18009 |
medium | 4.3 | 0.0023 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-11737 |
medium | 4.3 | 0.0033 | 2026-08-11 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admin | |
CVE-2026-11738 |
medium | 4.3 | 0.0040 | 2026-08-11 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admini | |
CVE-2026-9214 |
medium | 4.3 | 0.0023 | 2026-08-11 | Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated admini | |
CVE-2026-17109 |
medium | 4.3 | 0.0045 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameter | |
CVE-2026-65645 |
medium | 4.3 | 0.0034 | 2026-08-21 | Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, | |
CVE-2026-86875 |
medium | 4.3 | 0.0028 | 2026-10-20 | An input validation issue was addressed with improved input validation. This issue is fixed in Xcode | |
CVE-2026-7934 |
medium | 4.2 | 0.0017 | 2026-05-06 | Insufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778.96 | |
CVE-2026-7943 |
medium | 4.2 | 0.0017 | 2026-05-06 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed | |
CVE-2026-7947 |
medium | 4.2 | 0.0019 | 2026-05-06 | Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowe | |
CVE-2026-7964 |
medium | 4.2 | 0.0018 | 2026-05-06 | Insufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96 all | |
CVE-2026-7989 |
medium | 4.2 | 0.0016 | 2026-05-06 | Insufficient data validation in DataTransfer in Google Chrome prior to 148.0.7778.96 allowed a remot | |
CVE-2026-7993 |
medium | 4.2 | 0.0019 | 2026-05-06 | Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.77 |