Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13849 |
high | 8.6 | 0.0010 | 2026-06-30 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0. | |
CVE-2026-20273 |
high | 8.6 | 0.0047 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So | |
CVE-2026-19143 |
high | 8.6 | 0.0013 | 2026-08-06 | Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.792 | |
CVE-2026-47664 |
high | 8.6 | 0.0021 | 2026-08-07 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health da | |
CVE-2025-34108 |
high | 8.6 | 0.0149 | 2025-07-15 | A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterpri | |
CVE-2026-45391 |
high | 8.5 | 0.0089 | 2026-05-12 | A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a loc | |
CVE-2026-45393 |
high | 8.5 | 0.0022 | 2026-05-12 | A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to e | |
CVE-2026-43989 |
high | 8.5 | 0.0015 | 2026-05-12 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm | |
CVE-2026-5509 |
high | 8.5 | 0.0246 | 2026-05-27 | An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router | |
CVE-2026-54208 |
high | 8.5 | 0.0052 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing | |
CVE-2026-45392 |
high | 8.4 | 0.0028 | 2026-05-12 | DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execu | |
CVE-2026-47196 |
high | 8.4 | 0.0030 | 2026-06-12 | Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user i | |
CVE-2026-7905 |
high | 8.3 | 0.0022 | 2026-05-06 | Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778. | |
CVE-2026-7916 |
high | 8.3 | 0.0022 | 2026-05-06 | Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a rem | |
CVE-2026-7967 |
high | 8.3 | 0.0024 | 2026-05-06 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 all | |
CVE-2026-12009 |
high | 8.3 | 0.0025 | 2026-06-11 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7 | |
CVE-2026-12016 |
high | 8.3 | 0.0023 | 2026-06-11 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote a | |
CVE-2026-12034 |
high | 8.3 | 0.0018 | 2026-06-11 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior | |
CVE-2026-12465 |
high | 8.3 | 0.0024 | 2026-06-17 | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker | |
CVE-2026-13025 |
high | 8.3 | 0.0030 | 2026-06-24 | Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromi | |
CVE-2026-13813 |
high | 8.3 | 0.0030 | 2026-06-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 all | |
CVE-2026-13829 |
high | 8.3 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.78 | |
CVE-2026-13834 |
high | 8.3 | 0.0041 | 2026-06-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14401 |
high | 8.3 | 0.0024 | 2026-07-01 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871. | |
CVE-2026-14412 |
high | 8.3 | 0.0025 | 2026-07-01 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed | |
CVE-2026-14428 |
high | 8.3 | 0.0032 | 2026-07-01 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.4 | |
CVE-2026-14429 |
high | 8.3 | 0.0024 | 2026-07-01 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a | |
CVE-2026-15122 |
high | 8.3 | 0.0032 | 2026-07-08 | Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871 | |
CVE-2026-15769 |
high | 8.3 | 0.0032 | 2026-07-14 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior | |
CVE-2026-60640 |
high | 8.3 | 0.0017 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-67436 |
high | 8.3 | 0.0042 | 2026-07-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related mo | |
CVE-2026-17660 |
high | 8.3 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowe | |
CVE-2026-17663 |
high | 8.3 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 | |
CVE-2026-19177 |
high | 8.3 | 0.0032 | 2026-08-06 | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a | |
CVE-2026-52877 |
high | 8.3 | 0.0041 | 2026-08-18 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to v | |
CVE-2026-21157 |
high | 8.3 | 0.0011 | 2026-10-29 | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to la | |
CVE-2026-91346 |
high | 8.2 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-116172 |
high | 8.2 | 0.0034 | 2026-10-25 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC | |
CVE-2026-116173 |
high | 8.2 | 0.0034 | 2026-10-25 | vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attacke | |
CVE-2026-116174 |
high | 8.2 | 0.0028 | 2026-10-25 | vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC | |
CVE-2026-116178 |
high | 8.2 | 0.0033 | 2026-10-25 | vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attacke | |
CVE-2026-45137 |
high | 8.2 | 0.0028 | 2026-05-27 | Anchor is a framework providing several convenient developer tools for writing Solana programs. From | |
CVE-2026-49982 |
high | 8.2 | 0.0050 | 2026-06-11 | tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard a | |
CVE-2026-63520 |
high | 8.1 | 0.0096 | 2026-08-11 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute | 1 PoC |
CVE-2026-28907 |
high | 8.1 | 0.0030 | 2026-05-11 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7 | |
CVE-2026-45062 |
high | 8.1 | 0.0071 | 2026-06-10 | FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1.12.3, the | |
CVE-2026-45013 |
high | 8.1 | 0.0031 | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29 | |
CVE-2026-45135 |
high | 8.1 | 0.0068 | 2026-06-23 | Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCG | |
CVE-2026-13791 |
high | 8.1 | 0.0035 | 2026-06-30 | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47 allo | |
CVE-2026-13806 |
high | 8.1 | 0.0033 | 2026-06-30 | Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871.47 |