Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-50349 |
high | 7.0 | 0.0020 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-62694 |
high | 7.0 | 0.0026 | 2026-09-08 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69341 |
high | 7.0 | 0.0026 | 2026-09-08 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges loca | |
CVE-2026-85360 |
high | 7.0 | 0.0026 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-49496 |
medium | 6.9 | 0.0017 | 2026-06-10 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd | |
CVE-2026-115379 |
medium | 6.9 | 0.0028 | 2026-10-22 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability t | |
CVE-2026-41401 |
medium | 6.9 | 0.0067 | 2026-05-26 | libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags | |
CVE-2026-93515 |
medium | 6.8 | 0.0019 | 2026-10-28 | A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayl | |
CVE-2026-13282 |
medium | 6.8 | 0.0015 | 2026-06-25 | Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attac | |
CVE-2026-83706 |
medium | 6.7 | 0.0038 | 2026-10-13 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
CVE-2026-61920 |
medium | 6.6 | 0.0052 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-85841 |
medium | 6.6 | 0.0065 | 2026-10-13 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. | |
CVE-2025-54335 |
medium | 6.5 | 0.0022 | 2025-11-04 | An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. | |
CVE-2026-97743 |
medium | 6.5 | 0.0097 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information ove | |
CVE-2026-108438 |
medium | 6.5 | 0.0074 | 2026-10-15 | Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over | |
CVE-2026-27925 |
medium | 6.5 | 0.0036 | 2026-04-14 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker | |
CVE-2026-8550 |
medium | 6.5 | 0.0023 | 2026-05-14 | Use after free in Google Lens in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who | |
CVE-2026-47207 |
medium | 6.5 | 0.0044 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 u | |
CVE-2026-13879 |
medium | 6.5 | 0.0016 | 2026-06-30 | Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local | |
CVE-2026-14048 |
medium | 6.5 | 0.0016 | 2026-06-30 | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the loca | |
CVE-2026-14103 |
medium | 6.5 | 0.0032 | 2026-06-30 | Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-11368 |
medium | 6.5 | 0.0030 | 2026-08-04 | The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer w | |
CVE-2026-110686 |
medium | 6.5 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itse | |
CVE-2026-105006 |
medium | 6.4 | 0.0035 | 2026-10-13 | Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a phys | |
CVE-2026-71347 |
medium | 6.4 | 0.0023 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-62708 |
medium | 6.4 | 0.0034 | 2026-08-11 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physic | |
CVE-2026-55000 |
medium | 6.4 | 0.0034 | 2026-07-14 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges wit | |
CVE-2026-50374 |
medium | 6.3 | 0.0035 | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr | |
CVE-2026-58543 |
medium | 6.3 | 0.0024 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-5273 |
medium | 6.3 | 0.0036 | 2026-04-01 | Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute | |
CVE-2026-40701 |
medium | 6.3 | 0.0069 | 2026-05-13 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl | |
CVE-2026-10635 |
medium | 6.3 | 0.0016 | 2026-06-16 | On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core | |
CVE-2026-56376 |
medium | 6.3 | 0.0032 | 2026-06-23 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when mem | |
CVE-2026-54899 |
medium | 6.3 | 0.0041 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version | |
CVE-2026-54901 |
medium | 6.3 | 0.0041 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-54902 |
medium | 6.3 | 0.0050 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version | |
CVE-2026-56373 |
medium | 6.3 | 0.0023 | 2026-07-10 | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a s | |
CVE-2026-61860 |
medium | 6.3 | 0.0035 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when f | |
CVE-2026-61861 |
medium | 6.3 | 0.0055 | 2026-07-11 | ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption metho | |
CVE-2026-39316 |
medium | 6.2 | 0.0018 | 2026-04-07 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. | |
CVE-2026-13713 |
medium | 6.2 | 0.0018 | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node f | |
CVE-2026-8201 |
medium | 6.1 | 0.0013 | 2026-05-13 | A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis compo | |
CVE-2026-10663 |
medium | 6.1 | 0.0024 | 2026-07-12 | In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/us | |
CVE-2026-56113 |
medium | 6.0 | 0.0027 | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that al | |
CVE-2026-20473 |
medium | 6.0 | 0.0017 | 2026-08-03 | In display, there is a possible memory corruption due to use after free. This could lead to local es | |
CVE-2026-18700 |
medium | 6.0 | 0.0040 | 2026-08-11 | An issue in MongoDB Server's geospatial validation could allow an authenticated user with write priv | |
CVE-2026-56649 |
medium | 5.9 | 0.0070 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-85790 |
medium | 5.9 | 0.0080 | 2026-10-13 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw | |
CVE-2022-43552 |
medium | 5.9 | 0.0271 | 2023-02-09 | A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all p | |
CVE-2026-56412 |
medium | 5.9 | 0.0018 | 2026-06-21 | libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler |