Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1129)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2023-26293 |
— | — | 0.0025 | 2023-04-11 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All ve | |
CVE-2024-21413 |
— | — | 0.9466 | — | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code ex | KEV |
CVE-2025-6558 |
— | — | 0.1093 | — | Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerabi | KEV |
CVE-2026-33894 |
— | — | 0.0048 | 2026-03-27 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScrip | |
CVE-2026-34197 |
— | — | 0.9826 | 2026-04-07 | Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. | KEV |
CVE-2026-32203 |
— | — | 0.0190 | 2026-04-14 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny servic | |
CVE-2026-40466 |
— | — | 0.0478 | 2026-04-24 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability i | |
CVE-2026-41044 |
— | — | 0.0098 | 2026-04-24 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability i | |
CVE-2026-8391 |
— | — | 0.0030 | 2026-05-12 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-35433 |
— | — | 0.0077 | 2026-05-12 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | |
CVE-2026-34910 |
— | — | 0.9003 | — | Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious | KEV |
CVE-2026-50632 |
— | — | 0.0067 | 2026-06-12 | A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lea | |
CVE-2026-50633 |
— | — | 0.0089 | 2026-06-12 | A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can | |
CVE-2026-12569 |
— | — | 0.4605 | — | PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenti | KEV |
CVE-2026-64781 |
— | — | 0.0053 | 2026-08-17 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18 | |
CVE-2026-65336 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-65337 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-65340 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-43692 |
— | — | 0.0087 | 2026-09-14 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Gold | |
CVE-2026-84538 |
— | — | 0.0050 | 2026-09-14 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS | |
CVE-2026-86879 |
— | — | 0.0039 | 2026-09-14 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-86885 |
— | — | 0.0025 | 2026-09-14 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-86924 |
— | — | 0.0016 | 2026-09-14 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-93952 |
— | — | 0.0138 | — | Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that | KEV |
CVE-2026-88771 |
— | — | 0.8216 | — | Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that c | KEV |
CVE-2026-84547 |
— | — | 0.0020 | 2026-10-20 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS | |
CVE-2026-86871 |
— | — | 0.0049 | 2026-10-20 | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Gold | |
CVE-2026-86963 |
— | — | 0.0034 | 2026-10-20 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2009-0927 |
— | — | 0.9663 | — | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arb | KEV |
CVE-2009-2055 |
— | — | 0.0331 | — | Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-o | KEV |
CVE-2012-0151 |
— | — | 0.8766 | — | The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not prop | KEV |
CVE-2012-1535 |
— | — | 0.7038 | — | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or | KEV |