Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2614)
CWE-79 (1799)
CWE-416 (1282)
CWE-862 (1170)
CWE-89 (1091)
CWE-22 (1018)
CWE-125 (867)
CWE-200 (841)
CWE-306 (832)
CWE-122 (826)
CWE-20 (789)
CWE-78 (702)
CWE-918 (685)
CWE-787 (677)
CWE-94 (637)
CWE-863 (604)
CWE-74 (600)
CWE-639 (535)
CWE-400 (513)
CWE-269 (499)
CWE-119 (494)
CWE-502 (467)
CWE-770 (433)
CWE-287 (424)
CWE-121 (404)
CWE-77 (372)
CWE-190 (362)
CWE-362 (321)
CWE-352 (271)
CWE-285 (241)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-83750 |
high | 7.0 | 0.0023 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized at | |
CVE-2026-83871 |
high | 7.0 | 0.0022 | 2026-10-13 | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege | |
CVE-2026-84018 |
high | 7.0 | 0.0019 | 2026-10-13 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg | |
CVE-2026-85879 |
high | 7.0 | 0.0022 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorize | |
CVE-2026-85920 |
high | 7.0 | 0.0016 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker | |
CVE-2026-85943 |
high | 7.0 | 0.0022 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al | |
CVE-2026-97774 |
high | 7.0 | 0.0018 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authori | |
CVE-2026-4878 |
high | 7.0 | 0.0020 | 2026-04-09 | A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TO | |
CVE-2026-27929 |
high | 7.0 | 0.0019 | 2026-04-14 | Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to | |
CVE-2026-32093 |
high | 7.0 | 0.0112 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Funct | |
CVE-2026-35352 |
high | 7.0 | 0.0015 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreut | |
CVE-2026-41702 |
high | 7.0 | 0.0017 | 2026-05-15 | VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an oper | |
CVE-2026-41045 |
high | 7.0 | 0.0016 | 2026-06-22 | A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a loca | |
CVE-2026-25271 |
high | 7.0 | 0.0007 | 2026-07-06 | Memory Corruption when processing asynchronous input parameters due to improper handling of modified | |
CVE-2026-53410 |
high | 7.0 | 0.0010 | 2026-07-16 | A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation proces | |
CVE-2026-16838 |
high | 7.0 | 0.0010 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical fil | |
CVE-2026-16922 |
high | 7.0 | 0.0010 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-16927 |
high | 7.0 | 0.0010 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges d | |
CVE-2026-16935 |
high | 7.0 | 0.0010 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg | |
CVE-2026-70122 |
medium | 6.5 | 0.0029 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an au | |
CVE-2026-66314 |
medium | 6.5 | 0.0057 | 2026-08-03 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unaut | |
CVE-2026-9796 |
medium | 6.5 | 0.0022 | 2026-05-28 | A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can expl | |
CVE-2026-47621 |
medium | 6.5 | 0.0042 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in t | |
CVE-2026-105481 |
medium | 6.5 | 0.0032 | 2026-10-23 | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that | |
CVE-2026-12374 |
medium | 6.4 | 0.0007 | 2026-07-01 | Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the Privi | |
CVE-2026-57973 |
medium | 6.3 | 0.0022 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorize | 1 PoC |
CVE-2026-35355 |
medium | 6.3 | 0.0012 | 2026-04-22 | The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) rac | |
CVE-2026-35356 |
medium | 6.3 | 0.0011 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreut | |
CVE-2026-35360 |
medium | 6.3 | 0.0010 | 2026-04-22 | The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race | |
CVE-2026-35364 |
medium | 6.3 | 0.0009 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils coreutils | |
CVE-2026-35374 |
medium | 6.3 | 0.0007 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutil | |
CVE-2026-70667 |
medium | 6.3 | 0.0018 | 2026-08-18 | Lemur manages TLS certificate creation. Prior to 1.9.3, _validate_revocation_url in lemur/certificat | |
CVE-2026-20474 |
medium | 6.0 | 0.0013 | 2026-08-03 | In display, there is a possible escalation of privilege due to a race condition. This could lead to | |
CVE-2026-13742 |
medium | 5.9 | 0.0012 | 2026-06-29 | Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digita | |
CVE-2026-14160 |
medium | 5.9 | 0.0012 | 2026-06-30 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allo | |
CVE-2026-35376 |
medium | 5.8 | 0.0011 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutil | |
CVE-2026-48983 |
medium | 5.8 | 0.0011 | 2026-06-18 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior | |
CVE-2026-59676 |
medium | 5.8 | 0.0010 | 2026-07-23 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycore | |
CVE-2026-67433 |
medium | 5.8 | 0.0010 | 2026-07-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related mo | |
CVE-2026-53796 |
medium | 5.8 | 0.0013 | 2026-08-13 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in | |
CVE-2026-11835 |
medium | 5.7 | 0.0011 | 2026-08-04 | Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra | |
CVE-2026-5303 |
medium | 5.7 | 0.0023 | 2026-08-11 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could pote | |
CVE-2026-53797 |
medium | 5.7 | 0.0014 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree trave | |
CVE-2026-53800 |
medium | 5.7 | 0.0014 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feat | |
CVE-2026-56178 |
medium | 5.5 | 0.0023 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an autho | |
CVE-2026-70288 |
medium | 5.5 | 0.0035 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author | |
CVE-2026-58198 |
medium | 5.5 | 0.0014 | 2026-07-09 | ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2. | |
CVE-2026-20492 |
medium | 5.5 | 0.0011 | 2026-08-03 | In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could l | |
CVE-2026-1880 |
medium | 5.4 | 0.0014 | 2026-04-16 | An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update | |
CVE-2026-3428 |
medium | 5.4 | 0.0007 | 2026-04-16 | A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center |