Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-17815 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17817 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-17820 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-17829 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17833 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17843 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacke | |
CVE-2026-17857 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17871 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17876 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17879 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17880 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17885 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17895 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17897 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacke | |
CVE-2026-17900 |
medium | 4.3 | 0.0020 | 2026-07-30 | Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowe | |
CVE-2026-17904 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-17905 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a rem | |
CVE-2026-17910 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-17911 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-17925 |
medium | 4.3 | 0.0020 | 2026-07-30 | Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a re | |
CVE-2026-17927 |
medium | 4.3 | 0.0016 | 2026-07-30 | Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attac | |
CVE-2026-17933 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-17954 |
medium | 4.3 | 0.0020 | 2026-07-30 | Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cro | |
CVE-2026-17959 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17963 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacke | |
CVE-2026-17977 |
medium | 4.3 | 0.0022 | 2026-07-30 | Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross | |
CVE-2026-17981 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-18016 |
medium | 4.3 | 0.0020 | 2026-07-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 all | |
CVE-2026-17984 |
low | 3.3 | 0.0012 | 2026-07-30 | Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-12032 |
low | 3.1 | 0.0015 | 2026-06-11 | Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowe | |
CVE-2026-17702 |
low | 3.1 | 0.0031 | 2026-07-30 | Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17715 |
low | 3.1 | 0.0018 | 2026-07-30 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17720 |
low | 3.1 | 0.0018 | 2026-07-30 | Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17732 |
low | 3.1 | 0.0018 | 2026-07-30 | Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacke | |
CVE-2026-17826 |
low | 3.1 | 0.0018 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17957 |
low | 3.1 | 0.0018 | 2026-07-30 | Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17997 |
low | 3.1 | 0.0018 | 2026-07-30 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-18000 |
low | 3.1 | 0.0018 | 2026-07-30 | Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-83813 |
low | 3.1 | 0.0011 | 2026-10-23 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1 | |
CVE-2026-110737 |
low | 2.3 | 0.0019 | 2026-10-27 | The push endpoint of a Vaadin application that uses server push reflects the request Origin into the | |
CVE-2026-6143 |
low | 2.1 | 0.0019 | 2026-04-13 | A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is | |
CVE-2026-7581 |
low | 2.1 | 0.0017 | 2026-05-01 | A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affects the fun | |
CVE-2026-7643 |
low | 2.1 | 0.0016 | 2026-05-02 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of t | |
CVE-2026-59153 |
low | 2.1 | 0.0026 | 2026-07-07 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTT | |
CVE-2026-115724 |
low | 2.1 | 0.0009 | 2026-10-23 | VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.ge | |
CVE-2025-34291 |
— | — | 0.9281 | — | Langflow contains an origin validation error vulnerability in which an overly permissive CORS config | KEV |
CVE-2026-28861 |
— | — | 0.0032 | 2026-03-25 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS |