Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2660)
CWE-79 (1932)
CWE-416 (1558)
CWE-862 (1259)
CWE-122 (1130)
CWE-89 (1124)
CWE-125 (1089)
CWE-22 (1052)
CWE-306 (873)
CWE-200 (871)
CWE-20 (832)
CWE-787 (739)
CWE-78 (728)
CWE-918 (712)
CWE-863 (674)
CWE-94 (660)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (512)
CWE-119 (507)
CWE-502 (494)
CWE-287 (456)
CWE-770 (453)
CWE-121 (446)
CWE-190 (420)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-56113 |
medium | 6.0 | 0.0027 | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that al | |
CVE-2026-20473 |
medium | 6.0 | 0.0017 | 2026-08-03 | In display, there is a possible memory corruption due to use after free. This could lead to local es | |
CVE-2026-18700 |
medium | 6.0 | 0.0040 | 2026-08-11 | An issue in MongoDB Server's geospatial validation could allow an authenticated user with write priv | |
CVE-2026-56649 |
medium | 5.9 | 0.0070 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-85790 |
medium | 5.9 | 0.0080 | 2026-10-13 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw | |
CVE-2022-43552 |
medium | 5.9 | 0.0271 | 2023-02-09 | A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all p | |
CVE-2026-56412 |
medium | 5.9 | 0.0018 | 2026-06-21 | libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler | |
CVE-2026-47205 |
medium | 5.9 | 0.0039 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 u | |
CVE-2026-48090 |
medium | 5.9 | 0.0058 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 u | |
CVE-2026-10655 |
medium | 5.9 | 0.0038 | 2026-06-30 | The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP | |
CVE-2026-55406 |
medium | 5.9 | 0.0019 | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Pri | |
CVE-2026-50046 |
medium | 5.9 | 0.0024 | 2026-07-22 | In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS ( | |
CVE-2026-52863 |
medium | 5.9 | 0.0037 | 2026-07-22 | In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' m | |
CVE-2026-19662 |
medium | 5.9 | 0.0046 | 2026-09-16 | An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victi | |
CVE-2023-4813 |
medium | 5.9 | 0.0222 | 2023-09-12 | A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory | 1 PoC |
CVE-2026-78523 |
medium | 5.9 | 0.0098 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. | |
CVE-2026-17746 |
medium | 5.8 | 0.0019 | 2026-07-30 | Use after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who h | |
CVE-2026-17891 |
medium | 5.8 | 0.0016 | 2026-07-30 | Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-56117 |
medium | 5.7 | 0.0014 | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the | |
CVE-2026-63380 |
medium | 5.7 | 0.0014 | 2026-08-20 | Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid li | |
CVE-2026-11941 |
medium | 5.6 | 0.0025 | 2026-06-19 | Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI | |
CVE-2026-70201 |
medium | 5.5 | 0.0045 | 2026-10-13 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. | |
CVE-2025-55654 |
medium | 5.5 | 0.0024 | 2026-10-19 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box | |
CVE-2025-60482 |
medium | 5.5 | 0.0016 | 2026-10-19 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project | |
CVE-2025-60478 |
medium | 5.5 | 0.0018 | 2026-10-21 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Projec | |
CVE-2025-60491 |
medium | 5.5 | 0.0019 | 2026-10-21 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Bo | |
CVE-2025-60476 |
medium | 5.5 | 0.0018 | 2026-10-21 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project | |
CVE-2026-93516 |
medium | 5.5 | 0.0019 | 2026-10-28 | A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices | |
CVE-2026-5939 |
medium | 5.5 | 0.0011 | 2026-04-27 | A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing | |
CVE-2026-5940 |
medium | 5.5 | 0.0017 | 2026-04-27 | Calling a function that triggers a UI refresh after removing comments via a script may access an inv | |
CVE-2026-5942 |
medium | 5.5 | 0.0018 | 2026-04-27 | Flaws in page lifecycle management allow document structure changes to desynchronize internal compon | |
CVE-2026-17932 |
medium | 5.5 | 0.0014 | 2026-07-30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local at | |
CVE-2026-98090 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device po | |
CVE-2026-98091 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout dev | |
CVE-2024-26866 |
medium | 5.5 | 0.0022 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use | |
CVE-2024-49945 |
medium | 5.5 | 0.0027 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work | |
CVE-2026-100077 |
medium | 5.5 | 0.0015 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before reti | |
CVE-2026-68843 |
medium | 5.5 | 0.0040 | 2026-09-08 | Use after free in Microsoft Office Word allows an authorized attacker to disclose information locall | |
CVE-2026-68886 |
medium | 5.5 | 0.0048 | 2026-09-08 | Use after free in Windows Network Connection Broker allows an authorized attacker to disclose inform | |
CVE-2026-113869 |
medium | 5.4 | 0.0033 | 2026-10-20 | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Pa | |
CVE-2026-6040 |
medium | 5.4 | 0.0016 | 2026-06-15 | A heap use-after-free existed when importing the blank-width characters of an ODF number format. A p | |
CVE-2026-84727 |
medium | 5.4 | 0.0032 | 2026-10-21 | Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platform | |
CVE-2026-50432 |
medium | 5.3 | 0.0095 | 2026-07-14 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny ser | |
CVE-2026-70025 |
medium | 5.3 | 0.0108 | 2026-10-13 | Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. | |
CVE-2026-28994 |
medium | 5.3 | 0.0024 | 2026-05-11 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18. | |
CVE-2026-12015 |
medium | 5.3 | 0.0023 | 2026-06-11 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who ha | |
CVE-2026-10634 |
medium | 5.3 | 0.0027 | 2026-06-15 | Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tc | |
CVE-2026-91463 |
medium | 5.3 | 0.0023 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91464 |
medium | 5.3 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-82388 |
medium | 5.3 | 0.0021 | 2026-10-26 | bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands |