Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14122 |
high | 8.1 | 0.0029 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 15 | |
CVE-2026-61160 |
high | 8.1 | 0.0042 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O | |
CVE-2026-17686 |
high | 8.1 | 0.0033 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-57817 |
high | 8.1 | 0.0069 | 2026-08-06 | The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter | |
CVE-2026-19153 |
high | 8.1 | 0.0033 | 2026-08-06 | Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allow | |
CVE-2026-92287 |
high | 8.1 | 0.0022 | 2026-10-20 | Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 | |
CVE-2026-60648 |
high | 8.0 | 0.0018 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-60650 |
high | 8.0 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Co | |
CVE-2026-70177 |
high | 7.8 | 0.0035 | 2026-10-13 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-50417 |
high | 7.8 | 0.0033 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | |
CVE-2026-55899 |
high | 7.8 | 0.0047 | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod | |
CVE-2026-70313 |
high | 7.8 | 0.0047 | 2026-08-11 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose | |
CVE-2026-69934 |
high | 7.8 | 0.0038 | 2026-10-13 | Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri | |
CVE-2022-31808 |
high | 7.8 | 0.0023 | 2023-02-14 | A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), | |
CVE-2026-29143 |
high | 7.8 | 0.0025 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message | |
CVE-2026-29144 |
high | 7.8 | 0.0021 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitizatio | |
CVE-2026-26143 |
high | 7.8 | 0.0054 | 2026-04-14 | Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a securi | |
CVE-2026-26156 |
high | 7.8 | 0.0041 | 2026-04-14 | Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locall | |
CVE-2026-26161 |
high | 7.8 | 0.0030 | 2026-04-14 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevat | |
CVE-2026-26170 |
high | 7.8 | 0.0023 | 2026-04-14 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privilege | |
CVE-2026-32168 |
high | 7.8 | 0.0031 | 2026-04-14 | Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges | |
CVE-2026-7990 |
high | 7.8 | 0.0011 | 2026-05-06 | Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.777 | |
CVE-2026-7997 |
high | 7.8 | 0.0008 | 2026-05-06 | Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 | |
CVE-2026-13863 |
high | 7.8 | 0.0013 | 2026-06-30 | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0. | |
CVE-2026-13927 |
high | 7.8 | 0.0013 | 2026-06-30 | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 | |
CVE-2026-14060 |
high | 7.8 | 0.0013 | 2026-06-30 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0. | |
CVE-2026-14637 |
high | 7.8 | 0.0083 | 2026-07-04 | A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd | |
CVE-2026-53409 |
high | 7.8 | 0.0017 | 2026-07-16 | Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authentica | |
CVE-2026-63840 |
high | 7.8 | 0.0016 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63841 |
high | 7.8 | 0.0017 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63842 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63843 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63844 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63845 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63846 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63847 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63848 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63849 |
high | 7.8 | 0.0017 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63850 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63851 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63852 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63853 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63854 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63855 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-63856 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen | |
CVE-2026-16414 |
high | 7.8 | 0.0012 | 2026-07-21 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 al | |
CVE-2026-17861 |
high | 7.8 | 0.0013 | 2026-07-30 | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowe | |
CVE-2026-91457 |
high | 7.8 | 0.0016 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91458 |
high | 7.8 | 0.0013 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-88967 |
high | 7.7 | 0.0029 | 2026-10-28 | A user with query access to an Azure Monitor data source in Grafana can cause server-side requests t |