Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14087 |
high | 8.8 | 0.0037 | 2026-06-30 | Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-10037 |
high | 8.8 | 0.0018 | 2026-07-08 | A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME hand | |
CVE-2026-7755 |
high | 8.8 | 0.0075 | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete v | |
CVE-2026-63941 |
high | 8.8 | 0.0015 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_E | |
CVE-2026-60603 |
high | 8.8 | 0.0043 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (componen | |
CVE-2026-60633 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60634 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60636 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60637 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60638 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-60639 |
high | 8.8 | 0.0021 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-16421 |
high | 8.8 | 0.0052 | 2026-07-21 | Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote a | |
CVE-2026-65604 |
high | 8.8 | 0.0039 | 2026-07-23 | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open | |
CVE-2026-17786 |
high | 8.8 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-19169 |
high | 8.8 | 0.0034 | 2026-08-06 | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922. | |
CVE-2026-69106 |
high | 8.8 | 0.0052 | 2026-08-12 | A low-privileged user may poison cached artifact metadata under specific conditions, potentially cau | |
CVE-2026-52876 |
high | 8.8 | 0.0020 | 2026-08-18 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to v | |
CVE-2026-113040 |
high | 8.8 | 0.0042 | 2026-10-20 | Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113046 |
high | 8.8 | 0.0037 | 2026-10-20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113086 |
high | 8.8 | 0.0037 | 2026-10-20 | Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113099 |
high | 8.8 | 0.0042 | 2026-10-20 | Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a | |
CVE-2026-113117 |
high | 8.8 | 0.0042 | 2026-10-20 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remot | |
CVE-2026-113147 |
high | 8.8 | 0.0051 | 2026-10-20 | Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attac | |
CVE-2026-113162 |
high | 8.8 | 0.0044 | 2026-10-20 | Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113173 |
high | 8.8 | 0.0042 | 2026-10-20 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remo | |
CVE-2026-113175 |
high | 8.8 | 0.0040 | 2026-10-20 | Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-113195 |
high | 8.8 | 0.0044 | 2026-10-20 | Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113214 |
high | 8.8 | 0.0044 | 2026-10-20 | Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-113230 |
high | 8.8 | 0.0053 | 2026-10-20 | Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113231 |
high | 8.8 | 0.0038 | 2026-10-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-113244 |
high | 8.8 | 0.0045 | 2026-10-20 | Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to | |
CVE-2026-113249 |
high | 8.8 | 0.0045 | 2026-10-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remo | |
CVE-2026-113292 |
high | 8.8 | 0.0042 | 2026-10-20 | Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a | |
CVE-2026-113334 |
high | 8.8 | 0.0044 | 2026-10-20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a r | |
CVE-2026-76476 |
high | 8.8 | 0.0043 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams f | |
CVE-2026-93434 |
high | 8.7 | 0.0046 | 2026-10-27 | An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a rem | |
CVE-2025-52547 |
high | 8.7 | 0.0034 | 2025-09-02 | E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input va | |
CVE-2026-27928 |
high | 8.7 | 0.0041 | 2026-04-14 | Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feat | |
CVE-2026-26062 |
high | 8.7 | 0.0037 | 2026-05-14 | Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-o | |
CVE-2026-47181 |
high | 8.7 | 0.0031 | 2026-06-11 | PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection v | |
CVE-2026-56340 |
high | 8.7 | 0.0064 | 2026-06-20 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings p | |
CVE-2026-15724 |
high | 8.7 | 0.0052 | 2026-07-21 | In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated | |
CVE-2026-17735 |
high | 8.7 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowe | |
CVE-2026-16793 |
high | 8.7 | 0.0052 | 2026-08-04 | An improper neutralization of special elements used in an operating system command vulnerability was | |
CVE-2026-47662 |
high | 8.7 | 0.0041 | 2026-08-07 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health da | |
CVE-2026-59109 |
high | 8.7 | 0.0039 | 2026-08-13 | SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in re | |
CVE-2026-16520 |
high | 8.7 | 0.0054 | 2026-08-21 | Improper input validation and Exposure of sensitive information through data queries vulnerability i | |
CVE-2026-110938 |
high | 8.7 | 0.0042 | 2026-10-21 | In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service | |
CVE-2026-20224 |
high | 8.6 | 0.0109 | 2026-05-14 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow | |
CVE-2026-44522 |
high | 8.6 | 0.0056 | 2026-05-14 | Note Mark is an open-source note-taking application. From 0.13.0 to before 0.19.4, the Note Mark app |