Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-63297 |
critical | 9.9 | 0.0034 | 2026-08-12 | An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allow | |
CVE-2026-117603 |
critical | 9.3 | 0.0019 | 2026-10-27 | Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plu | |
CVE-2026-43632 |
critical | 9.2 | 0.0048 | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-ser | |
CVE-2026-65598 |
high | 8.9 | 0.0034 | 2026-07-22 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone ope | |
CVE-2026-47746 |
high | 8.9 | 0.0028 | 2026-08-03 | Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to | |
CVE-2026-71539 |
high | 8.9 | 0.0031 | 2026-08-18 | n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git n | |
CVE-2026-63937 |
high | 8.8 | 0.0014 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when | |
CVE-2026-77059 |
high | 8.8 | 0.0012 | 2026-10-26 | boneIO Black contains a TOCTOU race condition in the create_timedatectl_sudoers_file() function in b | |
CVE-2026-55950 |
high | 8.7 | 0.0038 | 2026-07-02 | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux | |
CVE-2026-7791 |
high | 8.5 | 0.0015 | 2026-05-04 | Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service | |
CVE-2026-71272 |
high | 8.5 | 0.0026 | 2026-08-05 | Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target h | |
CVE-2026-24067 |
high | 8.4 | 0.0018 | 2026-06-10 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.p | |
CVE-2026-76044 |
high | 8.3 | 0.0032 | 2026-08-18 | Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had com | |
CVE-2026-57959 |
high | 8.2 | 0.0026 | 2026-06-29 | Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates u | |
CVE-2026-63867 |
high | 8.2 | 0.0027 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while | |
CVE-2026-67607 |
high | 8.2 | 0.0040 | 2026-07-31 | LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-1114 | |
CVE-2026-53801 |
high | 8.2 | 0.0029 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scannin | |
CVE-2026-88173 |
high | 8.1 | 0.0051 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta | |
CVE-2026-41002 |
high | 8.1 | 0.0022 | 2026-05-07 | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server | |
CVE-2026-57818 |
high | 8.1 | 0.0047 | 2026-08-06 | A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code | |
CVE-2026-92374 |
high | 7.8 | 0.0009 | 2026-10-27 | A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in | |
CVE-2026-50673 |
high | 7.8 | 0.0021 | 2026-07-14 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2025-13032 |
high | 7.8 | 0.0025 | 2025-11-11 | Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker | |
CVE-2026-45203 |
high | 7.8 | 0.0013 | 2026-07-10 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmwar | |
CVE-2026-48344 |
high | 7.8 | 0.0017 | 2026-07-14 | Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil | |
CVE-2026-12234 |
high | 7.8 | 0.0011 | 2026-08-12 | The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/ | |
CVE-2026-16819 |
high | 7.7 | 0.0012 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-62189 |
high | 7.6 | 0.0037 | 2026-07-13 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync featu | |
CVE-2026-56648 |
high | 7.5 | 0.0051 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorize | |
CVE-2026-58299 |
high | 7.5 | 0.0047 | 2026-07-03 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthoriz | |
CVE-2026-45804 |
high | 7.5 | 0.0037 | 2026-07-15 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPip | |
CVE-2026-55391 |
high | 7.5 | 0.0031 | 2026-07-28 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct fr | |
CVE-2026-55524 |
high | 7.5 | 0.0024 | 2026-08-05 | PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs it | |
CVE-2026-50631 |
high | 7.4 | 0.0029 | 2026-06-12 | A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Toke | |
CVE-2026-56676 |
high | 7.4 | 0.0019 | 2026-07-10 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the | |
CVE-2026-72584 |
high | 7.4 | 0.0039 | 2026-08-10 | A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthen | |
CVE-2026-44694 |
high | 7.2 | 0.0024 | 2026-05-08 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, a | |
CVE-2026-54370 |
high | 7.2 | 0.0009 | 2026-06-29 | acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerabili | |
CVE-2026-53799 |
high | 7.2 | 0.0012 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to ca | |
CVE-2026-57114 |
high | 7.2 | 0.0019 | 2026-10-23 | PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's | |
CVE-2026-40896 |
high | 7.1 | 0.0017 | 2026-04-20 | OpenProject is open-source, web-based project management software. Prior to version 17.3.0, a user w | |
CVE-2026-83505 |
high | 7.0 | 0.0026 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize | |
CVE-2026-83510 |
high | 7.0 | 0.0024 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize | |
CVE-2026-83834 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo | |
CVE-2026-83839 |
high | 7.0 | 0.0021 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker t | |
CVE-2026-62728 |
high | 7.0 | 0.0020 | 2026-08-11 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an | |
CVE-2026-50658 |
high | 7.0 | 0.0020 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacke | |
CVE-2026-108396 |
high | 7.0 | 0.0021 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows a | |
CVE-2026-96939 |
high | 7.0 | 0.0023 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized at | |
CVE-2026-62840 |
high | 7.0 | 0.0021 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to e |