Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48066 |
medium | 5.7 | 0.0012 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, s | |
CVE-2026-70097 |
medium | 5.6 | 0.0022 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-34857 |
medium | 5.5 | 0.0007 | 2026-04-13 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability | |
CVE-2026-28996 |
medium | 5.5 | 0.0011 | 2026-05-11 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iP | |
CVE-2026-113707 |
medium | 5.3 | 0.0026 | 2026-10-20 | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the fu | |
CVE-2026-116476 |
medium | 5.3 | 0.0020 | 2026-10-26 | A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element i | |
CVE-2026-112708 |
medium | 5.3 | 0.0015 | 2026-10-26 | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, | |
CVE-2026-117507 |
medium | 5.3 | 0.0034 | 2026-10-27 | A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts th | |
CVE-2026-34368 |
medium | 5.3 | 0.0024 | 2026-03-27 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `transferBal | |
CVE-2026-7960 |
medium | 5.3 | 0.0018 | 2026-05-06 | Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised | |
CVE-2026-13874 |
medium | 5.3 | 0.0021 | 2026-06-30 | Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain pot | |
CVE-2026-18150 |
medium | 5.3 | 0.0028 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive informa | |
CVE-2026-62294 |
medium | 5.1 | 0.0014 | 2026-07-15 | Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature | |
CVE-2026-116119 |
medium | 5.1 | 0.0014 | 2026-10-26 | A vulnerability was found in NocoDB up to 2026.08.0. This affects an unknown part of the file packag | |
CVE-2026-18250 |
medium | 5.0 | 0.0027 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive informa | |
CVE-2026-112556 |
medium | 4.8 | 0.0037 | 2026-10-26 | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate | |
CVE-2026-98099 |
medium | 4.7 | 0.0009 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_poi | |
CVE-2026-70195 |
medium | 4.7 | 0.0026 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis | |
CVE-2026-112906 |
medium | 4.7 | 0.0017 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versio | |
CVE-2026-34849 |
medium | 4.7 | 0.0008 | 2026-04-13 | UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerabi | |
CVE-2026-34861 |
medium | 4.7 | 0.0006 | 2026-04-13 | Race condition vulnerability in the thermal management module. Impact: Successful exploitation of th | |
CVE-2026-34862 |
medium | 4.7 | 0.0006 | 2026-04-13 | Race condition vulnerability in the power consumption statistics module. Impact: Successful exploita | |
CVE-2026-28830 |
medium | 4.7 | 0.0008 | 2026-05-11 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. | |
CVE-2026-28992 |
medium | 4.7 | 0.0014 | 2026-05-11 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18 | |
CVE-2026-43659 |
medium | 4.7 | 0.0010 | 2026-05-11 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPa | |
CVE-2026-43781 |
medium | 4.7 | 0.0011 | 2026-07-27 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15 | |
CVE-2026-43811 |
medium | 4.7 | 0.0011 | 2026-07-27 | A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 1 | |
CVE-2026-86915 |
medium | 4.7 | 0.0009 | 2026-10-20 | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. A | |
CVE-2026-58616 |
medium | 4.4 | 0.0029 | 2026-08-28 | Concurrent execution using shared resource with improper synchronization ('race condition') in Copil | |
CVE-2026-118030 |
medium | 4.2 | 0.0016 | 2026-10-29 | A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which prov | |
CVE-2026-55945 |
medium | 4.2 | 0.0019 | 2026-07-03 | Concurrent execution using shared resource with improper synchronization ('race condition') in Micro | |
CVE-2026-13905 |
medium | 4.2 | 0.0010 | 2026-06-30 | Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to ob | |
CVE-2026-14133 |
medium | 4.2 | 0.0018 | 2026-06-30 | Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perf | |
CVE-2026-15995 |
medium | 4.2 | 0.0017 | 2026-07-17 | IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an at | |
CVE-2026-17724 |
medium | 4.2 | 0.0017 | 2026-07-30 | Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to i | |
CVE-2026-7366 |
medium | 4.2 | 0.0016 | 2026-08-12 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 | |
CVE-2026-78117 |
medium | 4.2 | 0.0016 | 2026-10-21 | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the | |
CVE-2026-34858 |
medium | 4.1 | 0.0007 | 2026-04-13 | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability | |
CVE-2026-0295 |
medium | 4.1 | 0.0011 | 2026-08-13 | A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenti | |
CVE-2026-117499 |
low | 3.7 | 0.0009 | 2026-10-27 | @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default ro | |
CVE-2026-82390 |
low | 3.7 | 0.0020 | 2026-10-26 | The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — i | |
CVE-2026-111404 |
low | 3.7 | 0.0020 | 2026-10-26 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab | |
CVE-2026-7954 |
low | 3.1 | 0.0015 | 2026-05-06 | Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had com | |
CVE-2026-10654 |
low | 3.1 | 0.0017 | 2026-06-30 | A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rf | |
CVE-2026-11812 |
low | 2.5 | 0.0010 | 2026-08-10 | The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation | |
CVE-2026-116215 |
low | 2.3 | 0.0016 | 2026-10-26 | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that al | |
CVE-2026-43930 |
low | 2.1 | 0.0024 | 2026-05-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node. | |
CVE-2026-116263 |
low | 2.1 | 0.0014 | 2026-10-26 | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the functio | |
CVE-2026-16082 |
low | 1.9 | 0.0012 | 2026-07-18 | A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function | |
CVE-2026-7724 |
low | 1.3 | 0.0025 | 2026-05-04 | A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerabilit |