Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-97812 |
high | 7.0 | 0.0028 | 2026-10-13 | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileg | |
CVE-2026-83916 |
high | 7.0 | 0.0031 | 2026-10-13 | Double free in Windows Error Reporting allows an authorized attacker to execute code locally. | |
CVE-2026-85904 |
high | 7.0 | 0.0015 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-26166 |
high | 7.0 | 0.0024 | 2026-04-14 | Double free in Windows Shell allows an authorized attacker to elevate privileges locally. | |
CVE-2026-32219 |
high | 7.0 | 0.0018 | 2026-04-14 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges l | |
CVE-2026-56109 |
high | 7.0 | 0.0014 | 2026-06-22 | The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerab | |
CVE-2026-116260 |
medium | 6.9 | 0.0029 | 2026-10-26 | A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function serv | |
CVE-2026-116743 |
medium | 6.8 | 0.0013 | 2026-10-26 | libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_ | |
CVE-2026-55653 |
medium | 6.5 | 0.0053 | 2026-06-23 | A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the D | |
CVE-2026-13713 |
medium | 6.2 | 0.0018 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node f | |
CVE-2023-27537 |
medium | 5.9 | 0.0190 | 2023-03-30 | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handle | |
CVE-2026-11893 |
medium | 5.9 | 0.0025 | 2026-08-11 | The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send( | |
CVE-2026-11894 |
medium | 5.9 | 0.0025 | 2026-08-11 | The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci | |
CVE-2026-20026 |
medium | 5.8 | 0.0067 | 2026-01-07 | Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests t | |
CVE-2026-46690 |
medium | 5.8 | 0.0013 | 2026-06-12 | unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sende | |
CVE-2026-32848 |
medium | 5.7 | 0.0008 | 2026-05-18 | NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the | |
CVE-2026-34867 |
medium | 5.6 | 0.0009 | 2026-04-13 | Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vu | |
CVE-2026-57446 |
medium | 5.3 | 0.0040 | 2026-10-16 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, | |
CVE-2026-78116 |
medium | 5.2 | 0.0021 | 2026-10-21 | The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor d | |
CVE-2026-6654 |
medium | 5.1 | 0.0017 | 2026-04-20 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thi | |
CVE-2026-17573 |
medium | 4.0 | 0.0015 | 2026-07-27 | A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file conta | |
CVE-2026-106175 |
low | 2.3 | 0.0010 | 2026-10-13 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS | |
CVE-2026-14604 |
low | 2.1 | 0.0023 | 2026-07-03 | A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the func | |
CVE-2026-33824 |
— | — | 0.7705 | — | Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that c | KEV |
CVE-2026-23918 |
— | — | 0.4973 | 2026-05-04 | Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This iss | |
CVE-2026-84558 |
— | — | 0.0015 | 2026-09-14 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Gold | |
CVE-2026-84561 |
— | — | 0.0068 | 2026-09-14 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 a | |
CVE-2026-86962 |
— | — | 0.0015 | 2026-10-20 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 a |