Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2661)
CWE-79 (1966)
CWE-416 (1559)
CWE-862 (1268)
CWE-122 (1130)
CWE-89 (1128)
CWE-125 (1089)
CWE-22 (1054)
CWE-200 (874)
CWE-306 (873)
CWE-20 (832)
CWE-787 (739)
CWE-78 (729)
CWE-918 (712)
CWE-863 (675)
CWE-94 (665)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (515)
CWE-119 (507)
CWE-502 (495)
CWE-287 (460)
CWE-770 (454)
CWE-121 (447)
CWE-190 (421)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-62813 |
high | 7.5 | 0.0066 | 2026-09-08 | Use after free in Active Directory Domain Services allows an authorized attacker to execute code ove | |
CVE-2026-69539 |
high | 7.5 | 0.0066 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over | |
CVE-2026-69890 |
high | 7.5 | 0.0028 | 2026-09-08 | Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate p | |
CVE-2026-72943 |
high | 7.5 | 0.0066 | 2026-09-08 | Use after free in Windows Deployment Services allows an authorized attacker to execute code over a n | |
CVE-2026-54127 |
high | 7.4 | 0.0031 | 2026-07-14 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. | |
CVE-2026-32156 |
high | 7.4 | 0.0029 | 2026-04-14 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker | |
CVE-2026-10646 |
high | 7.4 | 0.0045 | 2026-06-28 | Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a po | |
CVE-2026-16851 |
high | 7.4 | 0.0031 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-60080 |
high | 7.3 | 0.0068 | 2026-07-21 | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Ap | |
CVE-2026-71226 |
high | 7.3 | 0.0014 | 2026-08-05 | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an e | |
CVE-2026-63035 |
high | 7.2 | 0.0076 | 2026-07-30 | A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an | |
CVE-2026-57187 |
high | 7.1 | 0.0048 | 2026-10-26 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-50354 |
high | 7.1 | 0.0033 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69452 |
high | 7.1 | 0.0066 | 2026-10-13 | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privile | |
CVE-2025-10527 |
high | 7.1 | 0.0029 | 2025-09-16 | Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fix | |
CVE-2026-34854 |
high | 7.1 | 0.0010 | 2026-04-13 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will a | |
CVE-2026-34859 |
high | 7.1 | 0.0008 | 2026-04-13 | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will a | |
CVE-2026-10637 |
high | 7.1 | 0.0030 | 2026-06-16 | subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_ | |
CVE-2026-10640 |
high | 7.1 | 0.0037 | 2026-06-16 | Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_send_rs in | |
CVE-2026-13071 |
high | 7.1 | 0.0042 | 2026-07-22 | An authenticated user with read access can cause the mongod process to be terminated through certain | |
CVE-2026-17750 |
high | 7.1 | 0.0029 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti | |
CVE-2026-17811 |
high | 7.1 | 0.0023 | 2026-07-30 | Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-69244 |
high | 7.1 | 0.0053 | 2026-08-03 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an | |
CVE-2026-114042 |
high | 7.1 | 0.0035 | 2026-10-21 | FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owne | |
CVE-2026-69357 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-69364 |
high | 7.1 | 0.0044 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-69396 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-69460 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr | |
CVE-2026-69536 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over | |
CVE-2026-69597 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a networ | |
CVE-2026-69602 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges o | |
CVE-2026-69706 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-69761 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-68835 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg | |
CVE-2026-68846 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-68893 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate | |
CVE-2026-69274 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-69296 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privil | |
CVE-2026-69305 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil | |
CVE-2026-69314 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate | |
CVE-2026-69338 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges | |
CVE-2026-69366 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-69451 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privil | 1 PoC |
CVE-2026-69757 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. | |
CVE-2026-69775 |
high | 7.1 | 0.0057 | 2026-09-08 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over | |
CVE-2026-108134 |
high | 7.0 | 0.0028 | 2026-10-13 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | |
CVE-2026-108464 |
high | 7.0 | 0.0028 | 2026-10-13 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privil | |
CVE-2026-69743 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e | |
CVE-2026-69763 |
high | 7.0 | 0.0023 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | |
CVE-2026-70056 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally |