Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-41566 |
critical | 9.4 | 0.0036 | 2026-06-25 | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This i | |
CVE-2026-18860 |
high | 8.7 | 0.0044 | 2026-08-11 | Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT o | |
CVE-2026-27910 |
high | 7.8 | 0.0021 | 2026-04-14 | Improper handling of insufficient permissions or privileges in Windows Installer allows an authorize | |
CVE-2026-45195 |
high | 7.8 | 0.0014 | 2026-06-26 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmwar | |
CVE-2026-45196 |
high | 7.8 | 0.0014 | 2026-07-10 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmwar | |
CVE-2026-21733 |
high | 7.3 | 0.0010 | 2026-04-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain wr | |
CVE-2026-6805 |
medium | 6.9 | 0.0023 | 2026-05-07 | Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link | |
CVE-2026-20448 |
medium | 6.7 | 0.0015 | 2026-05-04 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This co | |
CVE-2026-20463 |
medium | 6.7 | 0.0016 | 2026-07-01 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead t | |
CVE-2026-9792 |
medium | 6.5 | 0.0027 | 2026-05-28 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` | |
CVE-2026-73239 |
medium | 6.5 | 0.0062 | 2026-08-12 | Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types | |
CVE-2026-3322 |
medium | 5.6 | 0.0018 | 2026-10-26 | Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that | |
CVE-2026-62393 |
medium | 4.3 | 0.0045 | 2026-07-14 | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper | |
CVE-2026-43786 |
— | — | 0.0018 | 2026-09-14 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat | |
CVE-2026-84631 |
— | — | 0.0015 | 2026-09-14 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat | |
CVE-2026-86917 |
— | — | 0.0015 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden |