Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-0068 |
critical | 10.0 | 0.0012 | 2026-06-17 | In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC | |
CVE-2026-0083 |
critical | 10.0 | 0.0012 | 2026-06-17 | In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This c | |
CVE-2026-56188 |
critical | 9.8 | 0.0061 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-28982 |
critical | 9.8 | 0.0056 | 2026-07-27 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, m | |
CVE-2026-13882 |
critical | 9.6 | 0.0024 | 2026-06-30 | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised th | |
CVE-2026-17709 |
critical | 9.6 | 0.0027 | 2026-07-30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had c | |
CVE-2026-17711 |
critical | 9.6 | 0.0027 | 2026-07-30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had c | |
CVE-2026-17855 |
critical | 9.6 | 0.0027 | 2026-07-30 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-43631 |
critical | 9.2 | 0.0057 | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab | |
CVE-2026-63946 |
high | 8.8 | 0.0034 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_ | |
CVE-2026-70250 |
high | 8.8 | 0.0048 | 2026-10-13 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjace | |
CVE-2026-50369 |
high | 8.8 | 0.0070 | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privilege | 1 PoC |
CVE-2026-50385 |
high | 8.8 | 0.0026 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50398 |
high | 8.8 | 0.0057 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-54107 |
high | 8.8 | 0.0021 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-54999 |
high | 8.8 | 0.0041 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-58608 |
high | 8.8 | 0.0057 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-63885 |
high | 8.8 | 0.0013 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between chang | |
CVE-2026-17712 |
high | 8.8 | 0.0045 | 2026-07-30 | Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arb | |
CVE-2026-35554 |
high | 8.7 | 0.0044 | 2026-04-07 | A race condition in the Apache Kafka Java producer client’s buffer pool management can cause message | |
CVE-2026-63952 |
high | 8.4 | 0.0013 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings | |
CVE-2026-41964 |
high | 8.4 | 0.0008 | 2026-05-15 | Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability m | |
CVE-2026-71968 |
high | 8.4 | 0.0014 | 2026-08-10 | OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Tr | |
CVE-2026-6921 |
high | 8.3 | 0.0019 | 2026-04-23 | Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potenti | |
CVE-2026-8520 |
high | 8.3 | 0.0017 | 2026-05-14 | Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially p | |
CVE-2026-12022 |
high | 8.3 | 0.0017 | 2026-06-11 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who | |
CVE-2026-12454 |
high | 8.3 | 0.0015 | 2026-06-17 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who | |
CVE-2026-12468 |
high | 8.3 | 0.0014 | 2026-06-17 | Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had co | |
CVE-2026-56297 |
high | 8.3 | 0.0047 | 2026-07-08 | FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_cal | |
CVE-2026-15119 |
high | 8.3 | 0.0024 | 2026-07-08 | Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had comp | |
CVE-2026-41458 |
high | 8.2 | 0.0036 | 2026-04-22 | OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login h | |
CVE-2026-57030 |
high | 8.2 | 0.0038 | 2026-07-09 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulner | |
CVE-2026-63867 |
high | 8.2 | 0.0027 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while | |
CVE-2026-62778 |
high | 8.1 | 0.0054 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. | |
CVE-2026-66802 |
high | 8.1 | 0.0054 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-42900 |
high | 8.1 | 0.0054 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50460 |
high | 8.1 | 0.0054 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-62820 |
high | 8.1 | 0.0054 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-69830 |
high | 8.1 | 0.0048 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-88174 |
high | 8.1 | 0.0042 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-5120 |
high | 8.1 | 0.0033 | 2026-07-01 | A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 coul | |
CVE-2026-69782 |
high | 8.1 | 0.0054 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS S | |
CVE-2026-98130 |
high | 8.1 | 0.0045 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP | |
CVE-2025-61560 |
high | 8.1 | 0.0032 | 2026-10-09 | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo | |
CVE-2026-94300 |
high | 8.1 | 0.0095 | 2026-10-21 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker wh | |
CVE-2026-98112 |
high | 7.8 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifeti | |
CVE-2026-61349 |
high | 7.8 | 0.0026 | 2026-08-11 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo | |
CVE-2026-44800 |
high | 7.8 | 0.0020 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-49808 |
high | 7.8 | 0.0020 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50305 |
high | 7.8 | 0.0026 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege |