Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2636)
CWE-79 (1858)
CWE-416 (1301)
CWE-862 (1192)
CWE-89 (1108)
CWE-22 (1029)
CWE-125 (885)
CWE-200 (849)
CWE-306 (840)
CWE-122 (831)
CWE-20 (799)
CWE-78 (716)
CWE-918 (694)
CWE-787 (693)
CWE-863 (648)
CWE-94 (642)
CWE-74 (601)
CWE-639 (548)
CWE-400 (532)
CWE-119 (503)
CWE-269 (502)
CWE-502 (472)
CWE-770 (445)
CWE-287 (433)
CWE-121 (408)
CWE-77 (375)
CWE-190 (372)
CWE-362 (323)
CWE-352 (284)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-12012 |
high | 8.1 | 0.0022 | 2026-06-11 | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileg | |
CVE-2026-13774 |
high | 8.1 | 0.0030 | 2026-06-30 | Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinc | |
CVE-2026-13779 |
high | 8.1 | 0.0039 | 2026-06-30 | Use after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-13787 |
high | 8.1 | 0.0042 | 2026-06-30 | Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-13799 |
high | 8.1 | 0.0032 | 2026-06-30 | Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentia | |
CVE-2026-14032 |
high | 8.1 | 0.0032 | 2026-06-30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker who c | |
CVE-2026-14111 |
high | 8.1 | 0.0038 | 2026-06-30 | Use after free in WebProtect in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinc | |
CVE-2026-69782 |
high | 8.1 | 0.0054 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS S | |
CVE-2026-85899 |
high | 8.1 | — | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privilege | |
CVE-2026-110681 |
high | 8.1 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser ob | |
CVE-2026-88121 |
high | 8.0 | 0.0116 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta | |
CVE-2026-49169 |
high | 8.0 | 0.0075 | 2026-07-14 | Use after free in DNS Server allows an authorized attacker to execute code over a network. | |
CVE-2026-34332 |
high | 8.0 | 0.0051 | 2026-05-12 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a n | |
CVE-2023-54207 |
high | 7.8 | 0.0016 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm devi | |
CVE-2026-63927 |
high | 7.8 | 0.0016 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free i | |
CVE-2026-64239 |
high | 7.8 | 0.0012 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete | |
CVE-2026-98112 |
high | 7.8 | 0.0009 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifeti | |
CVE-2026-98116 |
high | 7.8 | 0.0013 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap w | |
CVE-2026-98117 |
high | 7.8 | 0.0013 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/K | |
CVE-2026-70151 |
high | 7.8 | 0.0040 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc | |
CVE-2026-70274 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc | |
CVE-2026-83570 |
high | 7.8 | 0.0038 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil | |
CVE-2026-83796 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85906 |
high | 7.8 | 0.0034 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc | |
CVE-2026-85933 |
high | 7.8 | 0.0024 | 2026-10-13 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg | |
CVE-2026-85945 |
high | 7.8 | 0.0036 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-87691 |
high | 7.8 | 0.0024 | 2026-10-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo | |
CVE-2026-87694 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-87700 |
high | 7.8 | 0.0030 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-88134 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-88152 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attack | |
CVE-2026-86916 |
high | 7.8 | 0.0020 | 2026-10-26 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26. | |
CVE-2026-61349 |
high | 7.8 | 0.0026 | 2026-08-11 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo | |
CVE-2026-61357 |
high | 7.8 | 0.0033 | 2026-08-11 | Use after free in Application Information Services allows an authorized attacker to elevate privileg | |
CVE-2026-62701 |
high | 7.8 | 0.0033 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca | |
CVE-2026-62711 |
high | 7.8 | 0.0033 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
CVE-2026-62888 |
high | 7.8 | 0.0033 | 2026-08-11 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local | |
CVE-2026-44800 |
high | 7.8 | 0.0020 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-47290 |
high | 7.8 | 0.0047 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | |
CVE-2026-47642 |
high | 7.8 | 0.0047 | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
CVE-2026-49166 |
high | 7.8 | 0.0033 | 2026-07-14 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges loca | |
CVE-2026-49173 |
high | 7.8 | 0.0033 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-49808 |
high | 7.8 | 0.0020 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50293 |
high | 7.8 | 0.0033 | 2026-07-14 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges loca | |
CVE-2026-50305 |
high | 7.8 | 0.0026 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege | |
CVE-2026-50306 |
high | 7.8 | 0.0033 | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
CVE-2026-50314 |
high | 7.8 | 0.0047 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | |
CVE-2026-50317 |
high | 7.8 | 0.0021 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50321 |
high | 7.8 | 0.0021 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50326 |
high | 7.8 | 0.0033 | 2026-07-14 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges |