Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2650)
CWE-79 (1914)
CWE-416 (1381)
CWE-862 (1239)
CWE-89 (1115)
CWE-22 (1042)
CWE-125 (937)
CWE-306 (861)
CWE-200 (860)
CWE-122 (833)
CWE-20 (805)
CWE-787 (733)
CWE-78 (723)
CWE-918 (703)
CWE-863 (664)
CWE-94 (651)
CWE-74 (604)
CWE-639 (574)
CWE-400 (541)
CWE-269 (508)
CWE-119 (505)
CWE-502 (485)
CWE-770 (450)
CWE-287 (448)
CWE-121 (414)
CWE-190 (381)
CWE-77 (377)
CWE-362 (376)
CWE-476 (309)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-18692 |
high | 7.7 | 0.0057 | 2026-08-11 | An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated us | |
CVE-2026-10685 |
high | 7.6 | 0.0030 | 2026-07-31 | The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth | |
CVE-2026-85197 |
high | 7.6 | 0.0034 | 2026-09-04 | A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can ex | |
CVE-2025-60467 |
high | 7.5 | 0.0074 | 2026-06-24 | A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of | |
CVE-2026-62898 |
high | 7.5 | 0.0103 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw | |
CVE-2026-69986 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69987 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69988 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-70006 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-49171 |
high | 7.5 | 0.0030 | 2026-07-14 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges local | |
CVE-2026-50379 |
high | 7.5 | 0.0051 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50414 |
high | 7.5 | 0.0057 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50500 |
high | 7.5 | 0.0074 | 2026-07-14 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a networ | |
CVE-2026-50505 |
high | 7.5 | 0.0074 | 2026-07-14 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a netwo | |
CVE-2026-56648 |
high | 7.5 | 0.0051 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorize | |
CVE-2026-57984 |
high | 7.5 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-57986 |
high | 7.5 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-57992 |
high | 7.5 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-58276 |
high | 7.5 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-58294 |
high | 7.5 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-58531 |
high | 7.5 | 0.0051 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-62787 |
high | 7.5 | 0.0066 | 2026-08-11 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. | |
CVE-2026-66315 |
high | 7.5 | 0.0061 | 2026-08-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-105715 |
high | 7.5 | 0.0061 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute c | |
CVE-2026-69976 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69984 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69991 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69992 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov | |
CVE-2026-69994 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69995 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69996 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69997 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69998 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-70004 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-70012 |
high | 7.5 | 0.0063 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-70014 |
high | 7.5 | 0.0075 | 2026-10-13 | Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over | |
CVE-2026-83739 |
high | 7.5 | 0.0047 | 2026-10-13 | Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an | |
CVE-2026-85811 |
high | 7.5 | 0.0035 | 2026-10-13 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a | |
CVE-2026-87713 |
high | 7.5 | 0.0027 | 2026-10-13 | Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege | |
CVE-2026-97789 |
high | 7.5 | 0.0056 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2023-28319 |
high | 7.5 | 0.0249 | 2023-05-26 | A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify | |
CVE-2023-25747 |
high | 7.5 | 0.0061 | 2023-06-19 | A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on And | |
CVE-2026-5284 |
high | 7.5 | 0.0035 | 2026-04-01 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had co | |
CVE-2026-6319 |
high | 7.5 | 0.0029 | 2026-04-15 | Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote atta | |
CVE-2026-6758 |
high | 7.5 | 0.0081 | 2026-04-21 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 | |
CVE-2026-6759 |
high | 7.5 | 0.0036 | 2026-04-21 | Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox | |
CVE-2026-7897 |
high | 7.5 | 0.0031 | 2026-05-06 | Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker wh | |
CVE-2026-7929 |
high | 7.5 | 0.0025 | 2026-05-06 | Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker w | |
CVE-2026-7976 |
high | 7.5 | 0.0018 | 2026-05-06 | Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a | |
CVE-2026-28969 |
high | 7.5 | 0.0053 | 2026-05-11 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18. |