Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-64024 |
critical | 9.4 | 0.0031 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_i | |
CVE-2026-110685 |
critical | 9.1 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its | |
CVE-2026-33782 |
high | 8.7 | 0.0029 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Ju | |
CVE-2026-0646 |
high | 8.7 | 0.0034 | 2026-06-16 | A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handl | |
CVE-2026-35505 |
high | 8.7 | 0.0065 | 2026-06-30 | An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. I | |
CVE-2026-50254 |
high | 8.7 | 0.0065 | 2026-06-30 | An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak m | |
CVE-2026-67183 |
high | 8.7 | 0.0051 | 2026-07-28 | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to | |
CVE-2026-63252 |
high | 8.7 | 0.0058 | 2026-08-04 | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retaine | |
CVE-2026-51400 |
high | 8.4 | 0.0018 | 2026-08-04 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via | |
CVE-2026-110684 |
high | 8.1 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects | |
CVE-2024-1394 |
high | 7.5 | 0.0153 | 2024-03-21 | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a | |
CVE-2026-70033 |
high | 7.5 | 0.0127 | 2026-10-13 | Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unaut | |
CVE-2026-70155 |
high | 7.5 | 0.0133 | 2026-10-13 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to | |
CVE-2026-83677 |
high | 7.5 | 0.0112 | 2026-10-13 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att | |
CVE-2026-56018 |
high | 7.5 | 0.0061 | 2026-06-29 | JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowi | |
CVE-2026-13708 |
high | 7.5 | 0.0061 | 2026-07-06 | Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated | |
CVE-2026-10699 |
high | 7.5 | 0.0049 | 2026-07-08 | Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom | |
CVE-2026-47482 |
high | 7.5 | 0.0049 | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missin | |
CVE-2026-47667 |
high | 7.5 | 0.0052 | 2026-07-21 | CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the | |
CVE-2026-71675 |
high | 7.5 | 0.0055 | 2026-08-18 | An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_ | |
CVE-2026-81563 |
high | 7.5 | 0.0057 | 2026-09-16 | A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS Servic | |
CVE-2026-114613 |
high | 7.5 | 0.0044 | 2026-10-22 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-pyt | |
CVE-2026-110677 |
high | 7.5 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key val | |
CVE-2026-110672 |
high | 7.5 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a dupl | |
CVE-2026-119286 |
high | 7.5 | — | 2026-10-29 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, | |
CVE-2026-33775 |
high | 7.1 | 0.0019 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber | |
CVE-2026-33780 |
high | 7.1 | 0.0017 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning D | |
CVE-2026-56116 |
high | 7.1 | 0.0029 | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Rou | |
CVE-2026-57027 |
high | 7.1 | 0.0027 | 2026-07-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine ( | |
CVE-2026-56371 |
medium | 6.9 | 0.0044 | 2026-06-23 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT | |
CVE-2026-53429 |
medium | 6.9 | 0.0019 | 2026-06-29 | Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native a | |
CVE-2026-16318 |
medium | 6.9 | 0.0053 | 2026-07-21 | The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n | |
CVE-2026-116152 |
medium | 6.9 | 0.0031 | 2026-10-25 | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to re | |
CVE-2026-116154 |
medium | 6.9 | 0.0030 | 2026-10-25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, | |
CVE-2026-116155 |
medium | 6.9 | 0.0030 | 2026-10-25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP p | |
CVE-2025-50949 |
medium | 6.5 | 0.0026 | 2025-10-23 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. | |
CVE-2026-13593 |
medium | 6.5 | 0.0029 | 2026-06-29 | CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minif | |
CVE-2026-10677 |
medium | 6.5 | 0.0014 | 2026-07-21 | The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy | |
CVE-2026-10774 |
medium | 6.5 | 0.0029 | 2026-08-02 | Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key tear | |
CVE-2026-20746 |
medium | 6.3 | 0.0028 | 2026-06-12 | Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorize | |
CVE-2026-56368 |
medium | 6.3 | 0.0046 | 2026-06-24 | ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw p | |
CVE-2026-56365 |
medium | 6.3 | 0.0028 | 2026-06-30 | ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG | |
CVE-2026-116146 |
medium | 6.3 | 0.0027 | 2026-10-25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that | |
CVE-2026-116151 |
medium | 6.3 | 0.0027 | 2026-10-25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that | |
CVE-2026-61868 |
medium | 6.3 | 0.0022 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder tha | |
CVE-2026-61871 |
medium | 6.3 | 0.0035 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs whe | |
CVE-2026-76489 |
medium | 5.8 | 0.0046 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the memory management implementation of S | |
CVE-2023-53662 |
medium | 5.5 | 0.0016 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4_ | |
CVE-2023-53674 |
medium | 5.5 | 0.0016 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_cl | |
CVE-2023-53677 |
medium | 5.5 | 0.0013 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leaks in i |