Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13846 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who h | |
CVE-2026-13853 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | |
CVE-2026-13854 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-13861 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com | |
CVE-2026-13869 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13878 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13880 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who h | |
CVE-2026-14043 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who | |
CVE-2026-14044 |
critical | 9.6 | 0.0028 | 2026-06-30 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had co | |
CVE-2026-14093 |
critical | 9.6 | 0.0032 | 2026-06-30 | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com | |
CVE-2026-14113 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-14390 |
critical | 9.6 | 0.0025 | 2026-07-01 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti | |
CVE-2026-14398 |
critical | 9.6 | 0.0023 | 2026-07-01 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti | |
CVE-2026-14417 |
critical | 9.6 | 0.0034 | 2026-07-01 | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia | |
CVE-2026-14419 |
critical | 9.6 | 0.0023 | 2026-07-01 | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia | |
CVE-2026-14424 |
critical | 9.6 | 0.0034 | 2026-07-01 | Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to p | |
CVE-2026-14425 |
critical | 9.6 | 0.0023 | 2026-07-01 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti | |
CVE-2026-15113 |
critical | 9.6 | 0.0034 | 2026-07-08 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote atta | |
CVE-2026-15773 |
critical | 9.6 | 0.0034 | 2026-07-14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker | |
CVE-2026-15899 |
critical | 9.6 | 0.0034 | 2026-07-20 | Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote att | |
CVE-2026-15900 |
critical | 9.6 | 0.0034 | 2026-07-20 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker | |
CVE-2026-15901 |
critical | 9.6 | 0.0034 | 2026-07-20 | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to pote | |
CVE-2026-16424 |
critical | 9.6 | 0.0034 | 2026-07-21 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker | |
CVE-2026-17652 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17656 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti | |
CVE-2026-17670 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17688 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17692 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17704 |
critical | 9.6 | 0.0051 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17708 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17718 |
critical | 9.6 | 0.0044 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti | |
CVE-2026-17804 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17832 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17924 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had comp | |
CVE-2026-17947 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to po | |
CVE-2026-19149 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker t | |
CVE-2026-19166 |
critical | 9.6 | 0.0039 | 2026-08-06 | Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attac | |
CVE-2026-19170 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacke | |
CVE-2026-19171 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacke | |
CVE-2026-19175 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to pot | |
CVE-2026-113014 |
critical | 9.6 | 0.0050 | 2026-10-20 | Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113116 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote | |
CVE-2026-113189 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute | |
CVE-2026-113222 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentiall | |
CVE-2026-113261 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113263 |
critical | 9.6 | 0.0046 | 2026-10-20 | Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113270 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exe | |
CVE-2026-60002 |
critical | 9.4 | 0.0030 | 2026-07-08 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key | |
CVE-2026-49798 |
critical | 9.3 | 0.0036 | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. | |
CVE-2026-109618 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code e | KEV 710 PoC |