Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47205 |
medium | 5.9 | 0.0039 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 u | |
CVE-2026-48090 |
medium | 5.9 | 0.0058 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 u | |
CVE-2026-10655 |
medium | 5.9 | 0.0038 | 2026-06-30 | The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP | |
CVE-2026-55406 |
medium | 5.9 | 0.0019 | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Pri | |
CVE-2026-50046 |
medium | 5.9 | 0.0024 | 2026-07-22 | In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS ( | |
CVE-2026-52863 |
medium | 5.9 | 0.0037 | 2026-07-22 | In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' m | |
CVE-2026-19662 |
medium | 5.9 | 0.0046 | 2026-09-16 | An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victi | |
CVE-2026-17746 |
medium | 5.8 | 0.0019 | 2026-07-30 | Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who h | |
CVE-2026-17891 |
medium | 5.8 | 0.0016 | 2026-07-30 | Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-56117 |
medium | 5.7 | 0.0014 | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the | |
CVE-2026-63380 |
medium | 5.7 | 0.0014 | 2026-08-20 | Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid li | |
CVE-2026-11941 |
medium | 5.6 | 0.0025 | 2026-06-19 | Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI | |
CVE-2026-70201 |
medium | 5.5 | 0.0045 | 2026-10-13 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. | |
CVE-2025-55654 |
medium | 5.5 | 0.0024 | 2026-10-19 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box | |
CVE-2025-60482 |
medium | 5.5 | 0.0016 | 2026-10-19 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project | |
CVE-2025-60478 |
medium | 5.5 | 0.0018 | 2026-10-21 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Projec | |
CVE-2025-60491 |
medium | 5.5 | 0.0019 | 2026-10-21 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Bo | |
CVE-2025-60476 |
medium | 5.5 | 0.0018 | 2026-10-21 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project | |
CVE-2026-93516 |
medium | 5.5 | 0.0019 | 2026-10-28 | A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices | |
CVE-2026-5939 |
medium | 5.5 | 0.0011 | 2026-04-27 | A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing | |
CVE-2026-5940 |
medium | 5.5 | 0.0017 | 2026-04-27 | Calling a function that triggers a UI refresh after removing comments via a script may access an inv | |
CVE-2026-5942 |
medium | 5.5 | 0.0018 | 2026-04-27 | Flaws in page lifecycle management allow document structure changes to desynchronize internal compon | |
CVE-2026-17932 |
medium | 5.5 | 0.0014 | 2026-07-30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local at | |
CVE-2026-98090 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device po | |
CVE-2026-98091 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout dev | |
CVE-2026-113869 |
medium | 5.4 | 0.0033 | 2026-10-20 | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Pa | |
CVE-2026-6040 |
medium | 5.4 | 0.0016 | 2026-06-15 | A heap use-after-free existed when importing the blank-width characters of an ODF number format. A p | |
CVE-2026-84727 |
medium | 5.4 | 0.0032 | 2026-10-21 | Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platform | |
CVE-2026-50432 |
medium | 5.3 | 0.0095 | 2026-07-14 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny ser | |
CVE-2026-70025 |
medium | 5.3 | 0.0108 | 2026-10-13 | Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. | |
CVE-2026-28994 |
medium | 5.3 | 0.0024 | 2026-05-11 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18. | |
CVE-2026-12015 |
medium | 5.3 | 0.0023 | 2026-06-11 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who ha | |
CVE-2026-10634 |
medium | 5.3 | 0.0027 | 2026-06-15 | Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tc | |
CVE-2026-91463 |
medium | 5.3 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91464 |
medium | 5.3 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-82388 |
medium | 5.3 | 0.0021 | 2026-10-26 | bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands | |
CVE-2026-9158 |
medium | 5.2 | 0.0060 | 2026-06-18 | In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the | |
CVE-2026-6654 |
medium | 5.1 | 0.0017 | 2026-04-20 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thi | |
CVE-2026-40467 |
medium | 5.1 | 0.0021 | 2026-07-13 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routi | |
CVE-2026-33259 |
medium | 5.0 | 0.0022 | 2026-04-22 | Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free a | |
CVE-2026-17737 |
medium | 5.0 | 0.0019 | 2026-07-30 | Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-56131 |
medium | 4.9 | 0.0018 | 2026-06-19 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within ha | |
CVE-2026-10639 |
medium | 4.8 | 0.0023 | 2026-06-16 | In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo | |
CVE-2026-73282 |
medium | 4.8 | 0.0016 | 2026-08-11 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remo | |
CVE-2026-86423 |
medium | 4.8 | 0.0011 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability | |
CVE-2026-86425 |
medium | 4.8 | 0.0015 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability | |
CVE-2026-70077 |
medium | 4.7 | 0.0035 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to disclose information locally. | |
CVE-2026-70195 |
medium | 4.7 | 0.0026 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis | |
CVE-2026-83582 |
medium | 4.7 | 0.0035 | 2026-10-13 | Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information loca | |
CVE-2026-49167 |
medium | 4.7 | 0.0035 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |