Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-83915 |
high | 7.0 | 0.0031 | 2026-10-13 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privile | |
CVE-2026-83917 |
high | 7.0 | 0.0028 | 2026-10-13 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83924 |
high | 7.0 | 0.0030 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83930 |
high | 7.0 | 0.0027 | 2026-10-13 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privi | |
CVE-2026-84018 |
high | 7.0 | 0.0019 | 2026-10-13 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg | |
CVE-2026-84019 |
high | 7.0 | 0.0020 | 2026-10-13 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate p | |
CVE-2026-84020 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to | |
CVE-2026-85329 |
high | 7.0 | 0.0019 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Micro | |
CVE-2026-85370 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85372 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85802 |
high | 7.0 | 0.0026 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges | |
CVE-2026-85803 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privi | |
CVE-2026-85810 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local | |
CVE-2026-85823 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi | |
CVE-2026-85824 |
high | 7.0 | 0.0019 | 2026-10-13 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi | |
CVE-2026-85846 |
high | 7.0 | 0.0020 | 2026-10-13 | Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo | |
CVE-2026-85854 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local | |
CVE-2026-85855 |
high | 7.0 | 0.0034 | 2026-10-13 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local | |
CVE-2026-85868 |
high | 7.0 | 0.0029 | 2026-10-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri | |
CVE-2026-85876 |
high | 7.0 | 0.0020 | 2026-10-13 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85914 |
high | 7.0 | 0.0020 | 2026-10-13 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges | |
CVE-2026-85918 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t | |
CVE-2026-87715 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-88103 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil | |
CVE-2026-88161 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate pr | |
CVE-2026-96216 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96302 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96305 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96307 |
high | 7.0 | 0.0020 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96319 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges local | |
CVE-2026-26165 |
high | 7.0 | 0.0025 | 2026-04-14 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26173 |
high | 7.0 | 0.0016 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-26174 |
high | 7.0 | 0.0019 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-26177 |
high | 7.0 | 0.0020 | 2026-04-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele | |
CVE-2026-26182 |
high | 7.0 | 0.0020 | 2026-04-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele | |
CVE-2026-27908 |
high | 7.0 | 0.0155 | 2026-04-14 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate | |
CVE-2026-27917 |
high | 7.0 | 0.0024 | 2026-04-14 | Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized atta | |
CVE-2026-27921 |
high | 7.0 | 0.0119 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-27922 |
high | 7.0 | 0.0020 | 2026-04-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele | |
CVE-2026-27926 |
high | 7.0 | 0.0018 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-27927 |
high | 7.0 | 0.0019 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-32070 |
high | 7.0 | 0.0032 | 2026-04-14 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri | |
CVE-2026-32073 |
high | 7.0 | 0.0035 | 2026-04-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele | |
CVE-2026-32075 |
high | 7.0 | 0.0027 | 2026-04-14 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t | |
CVE-2026-32080 |
high | 7.0 | 0.0021 | 2026-04-14 | Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. | |
CVE-2026-32090 |
high | 7.0 | 0.0021 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-32091 |
high | 7.0 | 0.0016 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Micro | |
CVE-2026-0125 |
high | 7.0 | 0.0007 | 2026-06-16 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. Th | |
CVE-2026-6653 |
high | 7.0 | 0.0036 | 2026-06-22 | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allow | |
CVE-2026-61346 |
high | 7.0 | 0.0026 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall |