Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-32093 |
high | 7.0 | 0.0112 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Funct | |
CVE-2026-32150 |
high | 7.0 | 0.0016 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Funct | |
CVE-2026-32219 |
high | 7.0 | 0.0018 | 2026-04-14 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges l | |
CVE-2026-7432 |
high | 7.0 | 0.0028 | 2026-05-12 | A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to | |
CVE-2026-46732 |
high | 7.0 | 0.0010 | 2026-06-25 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Executio | |
CVE-2026-10681 |
high | 7.0 | 0.0011 | 2026-07-25 | In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c | |
CVE-2026-28926 |
high | 7.0 | 0.0012 | 2026-07-27 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15 | |
CVE-2026-43693 |
high | 7.0 | 0.0012 | 2026-07-27 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15 | |
CVE-2026-43755 |
high | 7.0 | 0.0011 | 2026-07-27 | A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 1 | |
CVE-2026-17993 |
high | 7.0 | 0.0009 | 2026-07-30 | Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perfo | |
CVE-2026-50349 |
high | 7.0 | 0.0020 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-78118 |
high | 7.0 | 0.0010 | 2026-10-21 | The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, bu | |
CVE-2026-118128 |
medium | 6.9 | 0.0036 | 2026-10-27 | A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultMana | |
CVE-2026-54497 |
medium | 6.8 | 0.0033 | 2026-07-17 | view_component is a framework for building reusable, testable, and encapsulated view components in R | |
CVE-2026-9030 |
medium | 6.8 | 0.0020 | 2026-08-07 | A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous sys | |
CVE-2026-85333 |
medium | 6.7 | 0.0020 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-61920 |
medium | 6.6 | 0.0052 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-28379 |
medium | 6.5 | 0.0026 | 2026-05-13 | A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server cra | |
CVE-2026-14015 |
medium | 6.5 | 0.0025 | 2026-06-30 | Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to leak | |
CVE-2026-14082 |
medium | 6.5 | 0.0025 | 2026-06-30 | Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-orig | |
CVE-2026-59896 |
medium | 6.5 | 0.0030 | 2026-07-08 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 be | |
CVE-2026-17822 |
medium | 6.5 | 0.0023 | 2026-07-30 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to p | |
CVE-2026-17841 |
medium | 6.5 | 0.0023 | 2026-07-30 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to p | |
CVE-2026-17999 |
medium | 6.5 | 0.0023 | 2026-07-30 | Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacke | |
CVE-2026-47620 |
medium | 6.5 | 0.0042 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in t | |
CVE-2026-100394 |
medium | 6.5 | 0.0042 | 2026-10-14 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From | |
CVE-2026-71347 |
medium | 6.4 | 0.0023 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-114641 |
medium | 6.3 | 0.0026 | 2026-10-22 | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos ( | |
CVE-2026-58543 |
medium | 6.3 | 0.0024 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-47270 |
medium | 6.3 | 0.0011 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, p | |
CVE-2026-116121 |
medium | 6.3 | 0.0023 | 2026-10-26 | A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing | |
CVE-2026-60161 |
medium | 6.1 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-5774 |
medium | 6.0 | 0.0024 | 2026-04-10 | Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, an | |
CVE-2026-56649 |
medium | 5.9 | 0.0070 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2023-28320 |
medium | 5.9 | 0.0266 | 2023-05-26 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several differe | |
CVE-2023-4049 |
medium | 5.9 | 0.0063 | 2023-08-01 | Race conditions in reference counting code were found through code inspection. These could have resu | |
CVE-2026-34850 |
medium | 5.9 | 0.0016 | 2026-04-13 | Race condition vulnerability in the notification service. Impact: Successful exploitation of this vu | |
CVE-2026-5516 |
medium | 5.9 | 0.0021 | 2026-05-27 | IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Serv | |
CVE-2026-45712 |
medium | 5.9 | 0.0034 | 2026-07-20 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/pri | |
CVE-2026-48154 |
medium | 5.9 | 0.0040 | 2026-08-04 | GoRest is a Golang starter kit built with the Gin framework for prototyping and developing RESTful A | |
CVE-2026-50139 |
medium | 5.9 | 0.0026 | 2026-08-18 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share to | |
CVE-2026-70091 |
medium | 5.9 | 0.0066 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-116403 |
medium | 5.9 | 0.0024 | 2026-10-26 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab | |
CVE-2026-0235 |
medium | 5.8 | 0.0011 | 2026-05-13 | A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated | |
CVE-2026-48982 |
medium | 5.8 | 0.0012 | 2026-06-18 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior | |
CVE-2026-61079 |
medium | 5.8 | 0.0011 | 2026-07-21 | Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are | |
CVE-2026-115567 |
medium | 5.8 | 0.0011 | 2026-10-23 | Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::ti | |
CVE-2026-115402 |
medium | 5.7 | 0.0012 | 2026-10-28 | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of servi | |
CVE-2026-32088 |
medium | 5.7 | 0.0019 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-32848 |
medium | 5.7 | 0.0008 | 2026-05-18 | NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the |