Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14055 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150. | |
CVE-2026-14056 |
critical | 9.6 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14095 |
critical | 9.6 | 0.0032 | 2026-06-30 | Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14106 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.4 | |
CVE-2026-14109 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-14120 |
critical | 9.6 | 0.0034 | 2026-06-30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14382 |
critical | 9.6 | 0.0028 | 2026-07-01 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed | |
CVE-2026-14411 |
critical | 9.6 | 0.0027 | 2026-07-01 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed | |
CVE-2026-17651 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.7 | |
CVE-2026-17655 |
critical | 9.6 | 0.0055 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17671 |
critical | 9.6 | 0.0051 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17672 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17681 |
critical | 9.6 | 0.0039 | 2026-07-30 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior t | |
CVE-2026-17684 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0. | |
CVE-2026-17713 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151 | |
CVE-2026-17738 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17749 |
critical | 9.6 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17768 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17803 |
critical | 9.6 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 | |
CVE-2026-17834 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17837 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17847 |
critical | 9.6 | 0.0037 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17848 |
critical | 9.6 | 0.0032 | 2026-07-30 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to pote | |
CVE-2026-17940 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior t | |
CVE-2026-17987 |
critical | 9.6 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 | |
CVE-2026-17990 |
critical | 9.6 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17991 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a r | |
CVE-2026-18002 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 al | |
CVE-2026-19164 |
critical | 9.6 | 0.0034 | 2026-08-06 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowe | |
CVE-2026-76035 |
critical | 9.6 | 0.0046 | 2026-08-18 | Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a r | |
CVE-2026-113023 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-113078 |
critical | 9.6 | 0.0042 | 2026-10-20 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-113084 |
critical | 9.6 | 0.0042 | 2026-10-20 | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-113089 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote a | |
CVE-2026-113235 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113252 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a r | |
CVE-2026-113328 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-115384 |
critical | 9.4 | 0.0031 | 2026-10-22 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerabilit | |
CVE-2026-42809 |
critical | 9.4 | 0.0036 | 2026-05-04 | Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation | |
CVE-2026-42810 |
critical | 9.4 | 0.0043 | 2026-05-04 | Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds tem | |
CVE-2026-42811 |
critical | 9.4 | 0.0043 | 2026-05-04 | In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for o | |
CVE-2026-42812 |
critical | 9.4 | 0.0037 | 2026-05-04 | In Apache Iceberg, the table's metadata files are control files: they tell readers which data files | |
CVE-2026-42613 |
critical | 9.4 | 0.0114 | 2026-05-11 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Login | |
CVE-2026-7165 |
critical | 9.4 | 0.0048 | 2026-06-22 | The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador' and 'keyJugadorObj | |
CVE-2026-64877 |
critical | 9.4 | 0.0032 | 2026-07-21 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access | |
CVE-2026-67330 |
critical | 9.4 | 0.0060 | 2026-08-01 | @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-be | |
CVE-2026-40317 |
critical | 9.3 | 0.0022 | 2026-04-18 | NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0. | |
CVE-2026-48315 |
critical | 9.3 | 0.0103 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnera | |
CVE-2026-14038 |
critical | 9.3 | 0.0033 | 2026-06-30 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 a | |
CVE-2026-22102 |
critical | 9.3 | 0.0053 | 2026-07-13 | A POST request sent to a specific webserver endpoint can be used to write to arbitrary file location |