Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1099)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-69856 |
high | 7.0 | 0.0023 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69915 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69931 |
high | 7.0 | 0.0023 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-69935 |
high | 7.0 | 0.0023 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69964 |
high | 7.0 | 0.0027 | 2026-10-13 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo | |
CVE-2026-69977 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attack | |
CVE-2026-70021 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc | |
CVE-2026-70026 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges loc | |
CVE-2026-70045 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. | |
CVE-2026-70144 |
high | 7.0 | 0.0039 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70160 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-70176 |
high | 7.0 | 0.0033 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70198 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc | |
CVE-2026-70209 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70236 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70243 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-70249 |
high | 7.0 | 0.0033 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70253 |
high | 7.0 | 0.0033 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70271 |
high | 7.0 | 0.0033 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70273 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-70276 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges | |
CVE-2026-83564 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil | |
CVE-2026-83644 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83675 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83682 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83687 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to | |
CVE-2026-83689 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall | |
CVE-2026-83696 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr | |
CVE-2026-83701 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privi | |
CVE-2026-83702 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83707 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83710 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privil | |
CVE-2026-83717 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83718 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83720 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83722 |
high | 7.0 | 0.0023 | 2026-10-13 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker t | |
CVE-2026-83738 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele | |
CVE-2026-83740 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83749 |
high | 7.0 | 0.0026 | 2026-10-13 | Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally | |
CVE-2026-83751 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo | |
CVE-2026-83752 |
high | 7.0 | 0.0026 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83785 |
high | 7.0 | 0.0033 | 2026-10-13 | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile | |
CVE-2026-83846 |
high | 7.0 | 0.0027 | 2026-10-13 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to eleva | |
CVE-2026-83852 |
high | 7.0 | 0.0026 | 2026-10-13 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc | |
CVE-2026-83853 |
high | 7.0 | 0.0028 | 2026-10-13 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83866 |
high | 7.0 | 0.0028 | 2026-10-13 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83879 |
high | 7.0 | 0.0023 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-83886 |
high | 7.0 | 0.0033 | 2026-10-13 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privi | |
CVE-2026-83900 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc | |
CVE-2026-83901 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges |