Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1856)
CWE-416 (1301)
CWE-862 (1191)
CWE-89 (1107)
CWE-22 (1028)
CWE-125 (885)
CWE-200 (849)
CWE-306 (840)
CWE-122 (831)
CWE-20 (798)
CWE-78 (716)
CWE-787 (693)
CWE-918 (693)
CWE-863 (648)
CWE-94 (642)
CWE-74 (601)
CWE-639 (547)
CWE-400 (532)
CWE-119 (503)
CWE-269 (502)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (375)
CWE-190 (372)
CWE-362 (323)
CWE-352 (283)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13832 |
high | 8.3 | 0.0030 | 2026-06-30 | Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | |
CVE-2026-50521 |
high | 8.3 | 0.0082 | 2026-07-01 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over | |
CVE-2026-15120 |
high | 8.3 | 0.0030 | 2026-07-08 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-15772 |
high | 8.3 | 0.0030 | 2026-07-14 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker | |
CVE-2026-15774 |
high | 8.3 | 0.0029 | 2026-07-14 | Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had co | |
CVE-2026-16804 |
high | 8.3 | 0.0030 | 2026-07-23 | Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had c | |
CVE-2026-17650 |
high | 8.3 | 0.0030 | 2026-07-30 | Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who | |
CVE-2026-17653 |
high | 8.3 | 0.0049 | 2026-07-30 | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had com | |
CVE-2026-17657 |
high | 8.3 | 0.0030 | 2026-07-30 | Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who h | |
CVE-2026-17722 |
high | 8.3 | 0.0030 | 2026-07-30 | Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17723 |
high | 8.3 | 0.0030 | 2026-07-30 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-19137 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacke | |
CVE-2026-19140 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had com | |
CVE-2026-19141 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote att | |
CVE-2026-19147 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker w | |
CVE-2026-19154 |
high | 8.3 | 0.0035 | 2026-08-06 | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19155 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who ha | |
CVE-2026-19163 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacke | |
CVE-2026-19172 |
high | 8.3 | 0.0030 | 2026-08-06 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had c | |
CVE-2026-53415 |
high | 8.3 | 0.0049 | 2026-08-11 | Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve | |
CVE-2026-19557 |
high | 8.3 | 0.0030 | 2026-08-11 | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker | |
CVE-2026-116540 |
high | 8.2 | 0.0046 | 2026-10-26 | netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free | |
CVE-2026-88117 |
high | 8.1 | 0.0070 | 2026-10-13 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network | |
CVE-2026-88119 |
high | 8.1 | 0.0076 | 2026-10-13 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network | |
CVE-2026-88120 |
high | 8.1 | 0.0076 | 2026-10-13 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network | |
CVE-2026-62778 |
high | 8.1 | 0.0054 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. | |
CVE-2026-66802 |
high | 8.1 | 0.0054 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-42900 |
high | 8.1 | 0.0054 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50439 |
high | 8.1 | 0.0079 | 2026-07-14 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute | |
CVE-2026-50460 |
high | 8.1 | 0.0054 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50487 |
high | 8.1 | 0.0079 | 2026-07-14 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a | |
CVE-2026-50694 |
high | 8.1 | 0.0079 | 2026-07-14 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to | |
CVE-2026-54995 |
high | 8.1 | 0.0079 | 2026-07-14 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex | |
CVE-2026-62819 |
high | 8.1 | 0.0071 | 2026-08-11 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an | |
CVE-2026-65789 |
high | 8.1 | 0.0071 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | |
CVE-2026-100218 |
high | 8.1 | 0.0082 | 2026-10-13 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove | |
CVE-2026-108460 |
high | 8.1 | 0.0076 | 2026-10-13 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net | |
CVE-2026-69830 |
high | 8.1 | 0.0048 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-69913 |
high | 8.1 | 0.0068 | 2026-10-13 | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | |
CVE-2026-70013 |
high | 8.1 | 0.0066 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
CVE-2026-70038 |
high | 8.1 | 0.0075 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
CVE-2026-70127 |
high | 8.1 | 0.0082 | 2026-10-13 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | |
CVE-2026-70187 |
high | 8.1 | 0.0078 | 2026-10-13 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove | |
CVE-2026-83914 |
high | 8.1 | 0.0082 | 2026-10-13 | Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. | |
CVE-2026-85371 |
high | 8.1 | 0.0067 | 2026-10-13 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a | |
CVE-2026-85799 |
high | 8.1 | 0.0066 | 2026-10-13 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a | |
CVE-2026-85926 |
high | 8.1 | 0.0066 | 2026-10-13 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to | |
CVE-2026-88173 |
high | 8.1 | 0.0051 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta | |
CVE-2026-22165 |
high | 8.1 | 0.0035 | 2026-05-01 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trig | |
CVE-2026-22166 |
high | 8.1 | 0.0039 | 2026-05-01 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trig |