Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-9789 |
high | 8.5 | 0.0015 | 2026-05-28 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to | |
CVE-2026-6423 |
high | 8.5 | 0.0017 | 2026-07-16 | A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused | |
CVE-2026-66399 |
high | 8.5 | 0.0029 | 2026-07-27 | phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMember | |
CVE-2026-91348 |
high | 8.4 | 0.0012 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versi | |
CVE-2026-91355 |
high | 8.4 | 0.0016 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-5373 |
high | 8.4 | 0.0022 | 2026-04-07 | An issue that allowed all-organization administrators to promote accounts to superuser status has be | |
CVE-2026-35272 |
high | 8.4 | 0.0020 | 2026-06-17 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: D | |
CVE-2026-58583 |
high | 8.4 | 0.0014 | 2026-07-07 | FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows | |
CVE-2026-60837 |
high | 8.4 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal | |
CVE-2026-17877 |
high | 8.4 | 0.0013 | 2026-07-30 | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed | |
CVE-2026-64634 |
high | 8.4 | 0.0014 | 2026-08-04 | A vulnerability allowing local privilege escalation to the Reporter service context. | |
CVE-2026-70840 |
high | 8.4 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-70842 |
high | 8.4 | 0.0016 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-35595 |
high | 8.3 | 0.0029 | 2026-04-10 | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CanUpdate check | |
CVE-2026-62473 |
high | 8.3 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite | |
CVE-2026-35288 |
high | 8.2 | 0.0019 | 2026-06-17 | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: D | |
CVE-2026-60854 |
high | 8.2 | 0.0036 | 2026-07-21 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operatio | |
CVE-2026-62456 |
high | 8.2 | 0.0029 | 2026-07-21 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operat | |
CVE-2026-42609 |
high | 8.1 | 0.0046 | 2026-05-11 | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav | |
CVE-2026-54652 |
high | 8.1 | 0.0029 | 2026-07-08 | Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} end | |
CVE-2026-59245 |
high | 8.1 | 0.0060 | 2026-07-13 | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all- | |
CVE-2026-43978 |
high | 8.1 | 0.0027 | 2026-07-16 | wger is a free, open-source workout and fitness manager. In versions prior to 2.6, a gym trainer can | |
CVE-2026-47409 |
high | 8.1 | 0.0034 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior | |
CVE-2026-47412 |
high | 8.1 | 0.0053 | 2026-07-21 | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior | |
CVE-2026-61225 |
high | 8.1 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communicat | |
CVE-2026-7327 |
high | 8.1 | 0.0039 | 2026-08-05 | An improper privilege management vulnerability in the REST API document processing pipeline of Progr | |
CVE-2026-16904 |
high | 8.1 | 0.0052 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary comman | |
CVE-2026-70943 |
high | 8.1 | 0.0037 | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec | |
CVE-2026-71110 |
high | 8.1 | 0.0036 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-94268 |
high | 8.1 | 0.0032 | 2026-10-23 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extend | |
CVE-2026-60371 |
high | 8.0 | 0.0027 | 2026-07-22 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen | |
CVE-2026-69414 |
high | 7.8 | 0.0137 | 2026-08-14 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros | 2 PoC |
CVE-2026-16703 |
high | 7.8 | 0.0014 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg | |
CVE-2026-16991 |
high | 7.8 | 0.0014 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg | |
CVE-2026-16997 |
high | 7.8 | 0.0018 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary comm | |
CVE-2026-91253 |
high | 7.8 | 0.0014 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported v | |
CVE-2026-91306 |
high | 7.8 | 0.0010 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-91311 |
high | 7.8 | 0.0014 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-49176 |
high | 7.8 | 0.0033 | 2026-07-14 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate priv | 2 PoC |
CVE-2026-50343 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate | 1 PoC |
CVE-2026-50391 |
high | 7.8 | 0.0030 | 2026-07-14 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privi | |
CVE-2026-31368 |
high | 7.8 | 0.0014 | 2026-04-21 | AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may | |
CVE-2026-6389 |
high | 7.8 | 0.0013 | 2026-04-30 | IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management | |
CVE-2026-7994 |
high | 7.8 | 0.0011 | 2026-05-06 | Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowe | |
CVE-2026-28840 |
high | 7.8 | 0.0014 | 2026-05-11 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia | |
CVE-2026-28919 |
high | 7.8 | 0.0015 | 2026-05-11 | A consistency issue was addressed with improved state handling. This issue is fixed in macOS Sequoia | |
CVE-2026-36213 |
high | 7.8 | 0.0059 | 2026-06-15 | An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges v | |
CVE-2026-0019 |
high | 7.8 | 0.0010 | 2026-06-17 | In SettingsLib, there is a possible way to disable system components due to a logic error in the cod | |
CVE-2026-14124 |
high | 7.8 | 0.0012 | 2026-06-30 | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.4 | |
CVE-2026-47868 |
high | 7.8 | 0.0014 | 2026-07-18 | VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with |