Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2025-12480 |
— | — | 0.9575 | — | Gladinet Triofox contains an improper access control vulnerability that allows access to initial set | KEV |
CVE-2026-21962 |
— | — | 0.7319 | — | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulne | KEV |
CVE-2026-35616 |
— | — | 0.9398 | — | Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthe | KEV |
CVE-2026-22754 |
— | — | 0.0027 | 2026-04-22 | Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/se | |
CVE-2026-44007 |
— | — | 0.0096 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting | |
CVE-2026-34908 |
— | — | 0.8829 | — | Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious ac | KEV |
CVE-2026-48907 |
— | — | 0.8544 | — | Widget Factory Joomla Content Editor contains an improper access control vulnerability which could a | KEV |
CVE-2026-81963 |
— | — | 0.0039 | — | Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker | KEV |
CVE-2026-28937 |
— | — | 0.0016 | 2026-09-14 | This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate | |
CVE-2026-43741 |
— | — | 0.0016 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate | |
CVE-2026-64712 |
— | — | 0.0015 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se | |
CVE-2026-65345 |
— | — | 0.0015 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and | |
CVE-2026-65361 |
— | — | 0.0015 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se | |
CVE-2026-65362 |
— | — | 0.0015 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se | |
CVE-2026-65380 |
— | — | 0.0017 | 2026-09-14 | An issue existed in the handling of snapshots. The issue was resolved with improved permissions logi | |
CVE-2026-65383 |
— | — | 0.0013 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app m | |
CVE-2026-65403 |
— | — | 0.0014 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS | |
CVE-2026-84491 |
— | — | 0.0014 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and | |
CVE-2026-84535 |
— | — | 0.0016 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Go | |
CVE-2026-84555 |
— | — | 0.0015 | 2026-09-14 | An authorization issue was addressed with improved access control. This issue is fixed in macOS Gold | |
CVE-2026-84573 |
— | — | 0.0015 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se | |
CVE-2026-84574 |
— | — | 0.0014 | 2026-09-14 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golde | |
CVE-2026-84585 |
— | — | 0.0016 | 2026-09-14 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golde | |
CVE-2026-86905 |
— | — | 0.0014 | 2026-09-14 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 2 | |
CVE-2026-65356 |
— | — | 0.0014 | 2026-10-20 | An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gat | |
CVE-2026-65379 |
— | — | 0.0014 | 2026-10-20 | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS G | |
CVE-2026-84508 |
— | — | 0.0014 | 2026-10-20 | This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS | |
CVE-2026-76407 |
— | — | 0.0013 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted | |
CVE-2011-3544 |
— | — | 0.9665 | — | An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java | KEV |
CVE-2012-5076 |
— | — | 0.9125 | — | The default Java security properties configuration did not restrict access to the com.sun.org.glassf | KEV |
CVE-2013-0422 |
— | — | 0.9702 | — | A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to | KEV |
CVE-2013-2423 |
— | — | 0.8521 | — | Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to a | KEV |