Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-10636 |
low | 3.7 | 0.0031 | 2026-06-16 | In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface | |
CVE-2026-11742 |
low | 3.6 | 0.0013 | 2026-08-07 | The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue | |
CVE-2026-8553 |
low | 3.1 | 0.0016 | 2026-05-14 | Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had com | |
CVE-2026-108333 |
low | 2.5 | 0.0013 | 2026-10-27 | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | |
CVE-2026-57438 |
low | 2.2 | 0.0013 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-54897 |
low | 2.1 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2, | |
CVE-2026-54898 |
low | 2.1 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-54522 |
low | 2.1 | 0.0023 | 2026-07-30 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1 | |
CVE-2026-95620 |
low | 2.1 | 0.0023 | 2026-10-23 | A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Netwo | |
CVE-2026-54619 |
low | 2.0 | 0.0014 | 2026-07-28 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, rede | |
CVE-2026-54620 |
low | 2.0 | 0.0014 | 2026-07-28 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks | |
CVE-2026-14760 |
low | 1.9 | 0.0020 | 2026-07-05 | A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_see | |
CVE-2026-14788 |
low | 1.9 | 0.0020 | 2026-07-06 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulner | |
CVE-2026-18785 |
low | 1.9 | 0.0016 | 2026-08-04 | A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is | |
CVE-2026-19108 |
low | 1.9 | 0.0016 | 2026-08-06 | A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the func | |
CVE-2026-57236 |
low | 1.7 | 0.0043 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-57435 |
low | 1.7 | 0.0046 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-57436 |
low | 1.7 | 0.0040 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-57437 |
low | 1.7 | 0.0040 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-34983 |
low | 1.0 | 0.0012 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can resu | |
CVE-2018-15982 |
— | — | 0.8958 | — | Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability | KEV |
CVE-2020-3992 |
— | — | 0.8302 | — | VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the | KEV |
CVE-2021-26411 |
— | — | 0.8167 | — | Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. | KEV |
CVE-2021-22893 |
— | — | 0.4717 | — | Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthentic | KEV |
CVE-2021-34486 |
— | — | 0.0933 | — | Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege | KEV |
CVE-2022-26485 |
— | — | 0.1426 | — | Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be ex | KEV |
CVE-2022-26486 |
— | — | 0.0236 | — | Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploit | KEV |
CVE-2023-24581 |
— | — | 0.0024 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2022-43716 |
— | — | 0.0095 | 2023-04-11 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3. | |
CVE-2022-2586 |
— | — | 0.1020 | — | Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to | KEV |
CVE-2024-1086 |
— | — | 0.2806 | — | Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allo | KEV |
CVE-2024-9680 |
— | — | 0.2318 | — | Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that a | KEV |
CVE-2025-21335 |
— | — | 0.0140 | — | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that all | KEV |
CVE-2025-62221 |
— | — | 0.0250 | — | Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can al | KEV |
CVE-2025-43529 |
— | — | 0.2565 | — | Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. | KEV |
CVE-2026-5281 |
— | — | 0.1374 | — | Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had comp | KEV |
CVE-2026-34734 |
— | — | 0.0019 | 2026-04-09 | HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the | |
CVE-2026-6746 |
— | — | 0.0095 | 2026-04-21 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firef | |
CVE-2026-6747 |
— | — | 0.0040 | 2026-04-21 | Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140 | |
CVE-2026-6754 |
— | — | 0.0039 | 2026-04-21 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Fire | |
CVE-2026-6784 |
— | — | 0.0036 | 2026-04-21 | Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of | |
CVE-2026-6785 |
— | — | 0.0051 | 2026-04-26 | Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox | |
CVE-2026-6786 |
— | — | 0.0050 | 2026-04-26 | Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird | |
CVE-2026-7322 |
— | — | 0.0032 | 2026-04-28 | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs s | |
CVE-2026-8090 |
— | — | 0.0032 | 2026-05-07 | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Fi | |
CVE-2026-8092 |
— | — | 0.0041 | 2026-05-07 | Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of these bugs s | |
CVE-2026-28883 |
— | — | 0.0040 | 2026-05-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-28942 |
— | — | 0.0061 | 2026-05-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-28946 |
— | — | 0.0039 | 2026-05-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-28947 |
— | — | 0.0038 | 2026-05-11 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari |