Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-96864 |
critical | 9.8 | 0.0065 | 2026-10-13 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute | |
CVE-2026-97749 |
critical | 9.8 | 0.0120 | 2026-10-13 | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-63888 |
critical | 9.8 | 0.0078 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC ov | |
CVE-2026-70158 |
high | 8.8 | 0.0096 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-85936 |
high | 8.8 | 0.0056 | 2026-10-13 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. | |
CVE-2026-83831 |
high | 8.8 | 0.0077 | 2026-10-27 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over | |
CVE-2026-97772 |
high | 8.8 | 0.0084 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network | |
CVE-2026-97767 |
high | 8.8 | 0.0060 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network | |
CVE-2026-12043 |
high | 8.7 | 0.0035 | 2026-06-12 | Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library m | |
CVE-2026-12659 |
high | 8.7 | 0.0043 | 2026-07-14 | A denial-of-service security issue exists in the affected products. The security issue stems from im | |
CVE-2026-64832 |
high | 8.7 | 0.0034 | 2026-07-22 | FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware d | |
CVE-2026-43622 |
high | 8.5 | 0.0023 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wr | |
CVE-2026-109257 |
high | 8.2 | 0.0039 | 2026-10-12 | FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that l | |
CVE-2026-70062 |
high | 8.1 | 0.0079 | 2026-10-13 | Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. | |
CVE-2026-62889 |
high | 8.1 | 0.0071 | 2026-08-11 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to ex | |
CVE-2026-84012 |
high | 8.1 | 0.0067 | 2026-10-13 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a | |
CVE-2026-88171 |
high | 8.1 | 0.0069 | 2026-10-13 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | |
CVE-2026-10653 |
high | 8.1 | 0.0042 | 2026-06-30 | The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-h | |
CVE-2026-94300 |
high | 8.1 | 0.0095 | 2026-10-21 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker wh | |
CVE-2026-83634 |
high | 7.8 | 0.0036 | 2026-10-13 | Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. | |
CVE-2026-88812 |
high | 7.8 | 0.0019 | 2026-10-27 | A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could | |
CVE-2026-50361 |
high | 7.8 | 0.0026 | 2026-07-14 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges l | |
CVE-2026-55004 |
high | 7.8 | 0.0033 | 2026-07-14 | Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally | |
CVE-2026-55132 |
high | 7.8 | 0.0057 | 2026-07-14 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
CVE-2026-97811 |
high | 7.8 | 0.0029 | 2026-10-13 | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85829 |
high | 7.8 | 0.0032 | 2026-10-13 | Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges | |
CVE-2026-88071 |
high | 7.8 | 0.0031 | 2026-10-13 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26163 |
high | 7.8 | 0.0030 | 2026-04-14 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26179 |
high | 7.8 | 0.0044 | 2026-04-14 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-32069 |
high | 7.8 | 0.0026 | 2026-04-14 | Double free in Windows Projected File System allows an authorized attacker to elevate privileges loc | |
CVE-2026-32074 |
high | 7.8 | 0.0026 | 2026-04-14 | Double free in Windows Projected File System allows an authorized attacker to elevate privileges loc | |
CVE-2026-64599 |
high | 7.8 | 0.0012 | 2026-08-06 | In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double | |
CVE-2026-95635 |
high | 7.8 | 0.0021 | 2026-10-13 | Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code exe | |
CVE-2026-50685 |
high | 7.5 | 0.0066 | 2026-07-14 | Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. | |
CVE-2026-97830 |
high | 7.5 | 0.0107 | 2026-10-13 | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service | |
CVE-2026-33811 |
high | 7.5 | 0.0088 | 2026-05-07 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-fr | |
CVE-2026-11576 |
high | 7.5 | 0.0046 | 2026-06-19 | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP | |
CVE-2026-43823 |
high | 7.5 | 0.0043 | 2026-07-23 | When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-f | |
CVE-2026-20338 |
high | 7.5 | 0.0056 | 2026-08-07 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker | |
CVE-2026-112457 |
high | 7.1 | 0.0035 | 2026-10-26 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Gold | |
CVE-2026-63652 |
high | 7.1 | 0.0058 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv | |
CVE-2026-109943 |
high | 7.1 | 0.0029 | 2026-10-13 | FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, whic | |
CVE-2026-83842 |
high | 7.0 | 0.0030 | 2026-10-13 | Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
CVE-2026-88149 |
high | 7.0 | 0.0020 | 2026-10-13 | Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat | |
CVE-2026-65780 |
high | 7.0 | 0.0026 | 2026-08-11 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | |
CVE-2026-61366 |
high | 7.0 | 0.0026 | 2026-08-11 | Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges | |
CVE-2026-62766 |
high | 7.0 | 0.0026 | 2026-08-11 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
CVE-2026-108132 |
high | 7.0 | 0.0028 | 2026-10-13 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
CVE-2026-95943 |
high | 7.0 | 0.0027 | 2026-10-13 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate | |
CVE-2026-97812 |
high | 7.0 | 0.0028 | 2026-10-13 | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileg |