Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-109619 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote cod | KEV |
CVE-2026-42530 |
critical | 9.2 | 0.0645 | 2026-06-17 | NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is co | |
CVE-2026-13368 |
critical | 9.2 | 0.0094 | 2026-07-03 | WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP a | |
CVE-2026-43631 |
critical | 9.2 | 0.0057 | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab | |
CVE-2026-43632 |
critical | 9.2 | 0.0048 | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-ser | |
CVE-2026-6100 |
critical | 9.1 | 0.0058 | 2026-04-13 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.G | |
CVE-2026-114111 |
high | 8.9 | 0.0013 | 2026-10-21 | sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-202 | |
CVE-2023-43000 |
high | 8.8 | 0.0404 | 2025-11-05 | Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processi | KEV |
CVE-2026-63919 |
high | 8.8 | 0.0065 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during | |
CVE-2026-63946 |
high | 8.8 | 0.0026 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_ | |
CVE-2026-74949 |
high | 8.8 | 0.0047 | 2026-08-18 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Fir | |
CVE-2026-74969 |
high | 8.8 | 0.0048 | 2026-08-18 | Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed | |
CVE-2026-78376 |
high | 8.8 | 0.0040 | 2026-08-24 | A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due | |
CVE-2026-103575 |
high | 8.8 | 0.0085 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-108458 |
high | 8.8 | 0.0085 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-70250 |
high | 8.8 | 0.0047 | 2026-10-13 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjace | |
CVE-2026-112623 |
high | 8.8 | 0.0054 | 2026-10-26 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-112626 |
high | 8.8 | 0.0057 | 2026-10-26 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-112637 |
high | 8.8 | 0.0054 | 2026-10-26 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-112651 |
high | 8.8 | 0.0054 | 2026-10-26 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-112655 |
high | 8.8 | 0.0059 | 2026-10-26 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari | |
CVE-2026-118307 |
high | 8.8 | 0.0029 | 2026-10-27 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potenti | |
CVE-2026-118313 |
high | 8.8 | 0.0024 | 2026-10-27 | Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute | |
CVE-2026-118330 |
high | 8.8 | 0.0031 | 2026-10-27 | Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote att | |
CVE-2026-118334 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to | |
CVE-2026-118338 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to pot | |
CVE-2026-118339 |
high | 8.8 | 0.0032 | 2026-10-27 | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to exe | |
CVE-2026-118341 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker t | |
CVE-2026-118344 |
high | 8.8 | 0.0034 | 2026-10-27 | Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execut | |
CVE-2026-118345 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potent | |
CVE-2026-118346 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to p | |
CVE-2026-118347 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to ex | |
CVE-2026-118350 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to exec | |
CVE-2026-118353 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute | |
CVE-2026-118356 |
high | 8.8 | 0.0026 | 2026-10-27 | Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute a | |
CVE-2026-118357 |
high | 8.8 | 0.0028 | 2026-10-27 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to po | |
CVE-2026-62870 |
high | 8.8 | 0.0082 | 2026-08-03 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-49795 |
high | 8.8 | 0.0033 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-50369 |
high | 8.8 | 0.0070 | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privilege | 1 PoC |
CVE-2026-50385 |
high | 8.8 | 0.0026 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50398 |
high | 8.8 | 0.0057 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-50413 |
high | 8.8 | 0.0033 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | |
CVE-2026-50474 |
high | 8.8 | 0.0082 | 2026-07-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-50666 |
high | 8.8 | 0.0091 | 2026-07-14 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate | |
CVE-2026-50687 |
high | 8.8 | 0.0033 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-57981 |
high | 8.8 | 0.0082 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-58608 |
high | 8.8 | 0.0057 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-58626 |
high | 8.8 | 0.0091 | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over | |
CVE-2026-62795 |
high | 8.8 | 0.0082 | 2026-08-11 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack | |
CVE-2026-62818 |
high | 8.8 | 0.0091 | 2026-08-11 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to exe |