Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13782 |
critical | 10.0 | 0.0032 | 2026-06-30 | Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | |
CVE-2026-16367 |
critical | 10.0 | 0.0055 | 2026-07-21 | Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability wa | |
CVE-2026-57092 |
critical | 9.9 | 0.0091 | 2026-07-14 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a networ | |
CVE-2025-52910 |
critical | 9.8 | 0.0039 | 2025-11-04 | An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2 | |
CVE-2026-63922 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after | |
CVE-2026-17118 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-62815 |
critical | 9.8 | 0.0097 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |
CVE-2026-62893 |
critical | 9.8 | 0.0097 | 2026-08-11 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a | |
CVE-2026-100202 |
critical | 9.8 | 0.0111 | 2026-10-13 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute c | |
CVE-2026-100219 |
critical | 9.8 | 0.0111 | 2026-10-13 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |
CVE-2026-105010 |
critical | 9.8 | 0.0099 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate priv | |
CVE-2026-96934 |
critical | 9.8 | 0.0094 | 2026-10-13 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network | |
CVE-2026-97816 |
critical | 9.8 | 0.0101 | 2026-10-13 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network | |
CVE-2026-69883 |
critical | 9.8 | 0.0095 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
CVE-2026-83780 |
critical | 9.8 | 0.0108 | 2026-10-13 | Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a ne | |
CVE-2026-85792 |
critical | 9.8 | 0.0089 | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-88102 |
critical | 9.8 | 0.0063 | 2026-10-13 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a ne | |
CVE-2026-88178 |
critical | 9.8 | 0.0097 | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a | |
CVE-2025-6424 |
critical | 9.8 | 0.0796 | 2025-06-24 | A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was | |
CVE-2025-11708 |
critical | 9.8 | 0.0051 | 2025-10-14 | Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, F | |
CVE-2026-12293 |
critical | 9.8 | 0.0030 | 2026-06-16 | Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Th | |
CVE-2026-53055 |
critical | 9.8 | 0.0043 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - preven | |
CVE-2026-13775 |
critical | 9.8 | 0.0032 | 2026-06-30 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp | |
CVE-2026-14121 |
critical | 9.8 | 0.0046 | 2026-06-30 | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-63808 |
critical | 9.8 | 0.0053 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after- | |
CVE-2026-63924 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh point | |
CVE-2026-16351 |
critical | 9.8 | 0.0058 | 2026-07-21 | Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed | |
CVE-2026-16352 |
critical | 9.8 | 0.0058 | 2026-07-21 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was | |
CVE-2026-16353 |
critical | 9.8 | 0.0060 | 2026-07-21 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16356 |
critical | 9.8 | 0.0058 | 2026-07-21 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was | |
CVE-2026-64439 |
critical | 9.8 | 0.0063 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async | |
CVE-2026-64703 |
critical | 9.8 | 0.0057 | 2026-07-27 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS S | |
CVE-2026-0163 |
critical | 9.8 | 0.0038 | 2026-08-04 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. Th | |
CVE-2026-109705 |
critical | 9.6 | 0.0032 | 2026-10-13 | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Net | |
CVE-2026-109707 |
critical | 9.6 | 0.0032 | 2026-10-13 | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Fi | |
CVE-2026-118308 |
critical | 9.6 | 0.0027 | 2026-10-27 | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potential | |
CVE-2026-5288 |
critical | 9.6 | 0.0032 | 2026-04-01 | Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attac | |
CVE-2026-5289 |
critical | 9.6 | 0.0035 | 2026-04-01 | Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who | |
CVE-2026-5290 |
critical | 9.6 | 0.0032 | 2026-04-01 | Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who | |
CVE-2026-6919 |
critical | 9.6 | 0.0029 | 2026-04-23 | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who ha | |
CVE-2026-7908 |
critical | 9.6 | 0.0022 | 2026-05-06 | Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to po | |
CVE-2026-7910 |
critical | 9.6 | 0.0022 | 2026-05-06 | Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had co | |
CVE-2026-8511 |
critical | 9.6 | 0.0023 | 2026-05-14 | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potential | |
CVE-2026-8580 |
critical | 9.6 | 0.0021 | 2026-05-14 | Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potenti | |
CVE-2026-12440 |
critical | 9.6 | 0.0025 | 2026-06-17 | Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a r | |
CVE-2026-13028 |
critical | 9.6 | 0.0032 | 2026-06-24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke | |
CVE-2026-13032 |
critical | 9.6 | 0.0032 | 2026-06-24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke | |
CVE-2026-13785 |
critical | 9.6 | 0.0032 | 2026-06-30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13789 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp | |
CVE-2026-13792 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker |