Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-77645 |
critical | 9.2 | 0.0056 | 2026-08-20 | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC Flex | |
CVE-2026-63569 |
critical | 9.1 | 0.0033 | 2026-10-02 | Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legi | |
CVE-2026-34178 |
critical | 9.1 | 0.0042 | 2026-04-09 | In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/in | |
CVE-2026-46910 |
critical | 9.1 | 0.0035 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-13851 |
critical | 9.1 | 0.0031 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15 | |
CVE-2026-13852 |
critical | 9.1 | 0.0031 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15 | |
CVE-2026-13872 |
critical | 9.1 | 0.0029 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15 | |
CVE-2026-22547 |
critical | 9.1 | 0.0052 | 2026-07-03 | Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including l | |
CVE-2026-48203 |
critical | 9.1 | 0.0060 | 2026-07-06 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), | |
CVE-2026-48205 |
critical | 9.1 | 0.0060 | 2026-07-06 | Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS comp | |
CVE-2026-41042 |
critical | 9.1 | 0.0151 | 2026-07-08 | Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which exe | |
CVE-2026-106626 |
critical | 9.1 | 0.0074 | 2026-10-13 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result | |
CVE-2026-115547 |
critical | 9.1 | 0.0054 | 2026-10-23 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of sp | |
CVE-2026-33844 |
critical | 9.0 | 0.0099 | 2026-05-07 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker | |
CVE-2026-13603 |
critical | 9.0 | 0.0041 | 2026-07-01 | The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, | |
CVE-2026-16723 |
critical | 9.0 | 0.0066 | 2026-07-23 | A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerabi | |
CVE-2026-118304 |
high | 8.8 | 0.0024 | 2026-10-27 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker t | |
CVE-2026-118314 |
high | 8.8 | 0.0027 | 2026-10-27 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remo | |
CVE-2026-118315 |
high | 8.8 | 0.0026 | 2026-10-27 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker t | |
CVE-2026-118328 |
high | 8.8 | 0.0040 | 2026-10-27 | Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacke | |
CVE-2026-118329 |
high | 8.8 | 0.0039 | 2026-10-27 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remot | |
CVE-2026-118331 |
high | 8.8 | 0.0034 | 2026-10-27 | Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-118335 |
high | 8.8 | 0.0024 | 2026-10-27 | Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a rem | |
CVE-2026-118336 |
high | 8.8 | 0.0032 | 2026-10-27 | Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attac | |
CVE-2026-118343 |
high | 8.8 | 0.0026 | 2026-10-27 | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote at | |
CVE-2026-118348 |
high | 8.8 | 0.0034 | 2026-10-27 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118354 |
high | 8.8 | 0.0026 | 2026-10-27 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-50370 |
high | 8.8 | 0.0050 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov | |
CVE-2026-50670 |
high | 8.8 | 0.0033 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-65811 |
high | 8.8 | 0.0096 | 2026-08-11 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. | |
CVE-2026-97769 |
high | 8.8 | 0.0090 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-105717 |
high | 8.8 | 0.0088 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod | |
CVE-2026-105718 |
high | 8.8 | 0.0095 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a | |
CVE-2026-108427 |
high | 8.8 | 0.0063 | 2026-10-15 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-83891 |
high | 8.8 | 0.0090 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2025-52544 |
high | 8.8 | 0.0036 | 2025-09-02 | E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an | |
CVE-2026-39386 |
high | 8.8 | 0.0044 | 2026-04-21 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 throug | |
CVE-2026-5174 |
high | 8.8 | 0.0332 | 2026-04-30 | Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Esca | |
CVE-2026-7992 |
high | 8.8 | 0.0022 | 2026-05-06 | Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0. | |
CVE-2026-8000 |
high | 8.8 | 0.0025 | 2026-05-06 | Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148. | |
CVE-2026-8527 |
high | 8.8 | 0.0029 | 2026-05-14 | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 all | |
CVE-2026-48704 |
high | 8.8 | 0.0044 | 2026-06-24 | Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15. | |
CVE-2026-48720 |
high | 8.8 | 0.0044 | 2026-06-24 | Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 until 0.2026.05.06.15. | |
CVE-2026-13777 |
high | 8.8 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 | |
CVE-2026-13817 |
high | 8.8 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-13850 |
high | 8.8 | 0.0029 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-13928 |
high | 8.8 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 all | |
CVE-2026-14009 |
high | 8.8 | 0.0034 | 2026-06-30 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote a | |
CVE-2026-14078 |
high | 8.8 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14084 |
high | 8.8 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 150.0.7871.47 all |