Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2637)
CWE-79 (1879)
CWE-416 (1379)
CWE-862 (1214)
CWE-89 (1111)
CWE-22 (1031)
CWE-125 (931)
CWE-306 (856)
CWE-200 (854)
CWE-122 (832)
CWE-20 (801)
CWE-787 (728)
CWE-78 (720)
CWE-918 (698)
CWE-863 (657)
CWE-94 (647)
CWE-74 (603)
CWE-639 (567)
CWE-400 (535)
CWE-119 (504)
CWE-269 (502)
CWE-502 (476)
CWE-770 (449)
CWE-287 (442)
CWE-121 (410)
CWE-190 (380)
CWE-77 (375)
CWE-362 (374)
CWE-476 (303)
CWE-352 (287)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-85861 |
high | 7.8 | 0.0024 | 2026-10-13 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges | |
CVE-2026-85863 |
high | 7.8 | 0.0024 | 2026-10-13 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges | |
CVE-2026-85872 |
high | 7.8 | 0.0028 | 2026-10-13 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc | |
CVE-2026-85874 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute cod | |
CVE-2026-85911 |
high | 7.8 | 0.0035 | 2026-10-13 | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges lo | |
CVE-2026-87712 |
high | 7.8 | 0.0024 | 2026-10-13 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to | |
CVE-2026-88080 |
high | 7.8 | 0.0024 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-88100 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privile | |
CVE-2026-88105 |
high | 7.8 | 0.0030 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil | |
CVE-2026-88109 |
high | 7.8 | 0.0034 | 2026-10-13 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges | |
CVE-2026-88182 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil | |
CVE-2026-96108 |
high | 7.8 | 0.0030 | 2026-10-13 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | |
CVE-2026-96223 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96244 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate priv | |
CVE-2026-96308 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96309 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges lo | |
CVE-2026-96317 |
high | 7.8 | 0.0025 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96997 |
high | 7.8 | 0.0031 | 2026-10-13 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges local | |
CVE-2023-30549 |
high | 7.8 | 0.0037 | 2023-04-25 | Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that | |
CVE-2026-27309 |
high | 7.8 | 0.0022 | 2026-03-27 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that | |
CVE-2026-21380 |
high | 7.8 | 0.0008 | 2026-04-06 | Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. | |
CVE-2026-27283 |
high | 7.8 | 0.0016 | 2026-04-14 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability th | |
CVE-2026-23657 |
high | 7.8 | 0.0041 | 2026-04-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
CVE-2026-26167 |
high | 7.8 | 0.0018 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-26168 |
high | 7.8 | 0.0018 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-26172 |
high | 7.8 | 0.0015 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-26181 |
high | 7.8 | 0.0023 | 2026-04-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege | |
CVE-2026-27909 |
high | 7.8 | 0.0177 | 2026-04-14 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil | |
CVE-2026-27911 |
high | 7.8 | 0.0015 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-27915 |
high | 7.8 | 0.0030 | 2026-04-14 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t | |
CVE-2026-27916 |
high | 7.8 | 0.0024 | 2026-04-14 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t | |
CVE-2026-27923 |
high | 7.8 | 0.0023 | 2026-04-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | |
CVE-2026-27924 |
high | 7.8 | 0.0029 | 2026-04-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | |
CVE-2026-32078 |
high | 7.8 | 0.0026 | 2026-04-14 | Use after free in Windows Projected File System allows an authorized attacker to elevate privileges | |
CVE-2026-32089 |
high | 7.8 | 0.0025 | 2026-04-14 | Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges lo | |
CVE-2026-32152 |
high | 7.8 | 0.0046 | 2026-04-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | |
CVE-2026-32153 |
high | 7.8 | 0.0020 | 2026-04-14 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges local | |
CVE-2026-32154 |
high | 7.8 | 0.0038 | 2026-04-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | |
CVE-2026-32155 |
high | 7.8 | 0.0026 | 2026-04-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally | |
CVE-2026-32158 |
high | 7.8 | 0.0020 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-32159 |
high | 7.8 | 0.0020 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-32163 |
high | 7.8 | 0.0016 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-32165 |
high | 7.8 | 0.0020 | 2026-04-14 | Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges lo | |
CVE-2026-32189 |
high | 7.8 | 0.0037 | 2026-04-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
CVE-2026-32197 |
high | 7.8 | 0.0029 | 2026-04-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
CVE-2026-32198 |
high | 7.8 | 0.0029 | 2026-04-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
CVE-2026-32199 |
high | 7.8 | 0.0029 | 2026-04-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
CVE-2026-32200 |
high | 7.8 | 0.0032 | 2026-04-14 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locall | |
CVE-2026-5943 |
high | 7.8 | 0.0018 | 2026-04-27 | Document structural anomalies caused inconsistencies between page element relationships and internal | |
CVE-2026-24082 |
high | 7.8 | 0.0008 | 2026-05-04 | Memory Corruption when copying data from a freed source while executing performance counter deselect |