Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2660)
CWE-79 (1928)
CWE-416 (1558)
CWE-862 (1259)
CWE-122 (1130)
CWE-89 (1124)
CWE-125 (1089)
CWE-22 (1052)
CWE-306 (873)
CWE-200 (871)
CWE-20 (832)
CWE-787 (739)
CWE-78 (728)
CWE-918 (712)
CWE-863 (671)
CWE-94 (660)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (512)
CWE-119 (507)
CWE-502 (494)
CWE-287 (456)
CWE-770 (453)
CWE-121 (446)
CWE-190 (420)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13595 |
medium | 5.3 | 0.0014 | 2026-06-29 | A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Mi | |
CVE-2026-9158 |
medium | 5.2 | 0.0060 | 2026-06-18 | In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the | |
CVE-2026-6654 |
medium | 5.1 | 0.0017 | 2026-04-20 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thi | |
CVE-2026-40467 |
medium | 5.1 | 0.0021 | 2026-07-13 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routi | |
CVE-2026-33259 |
medium | 5.0 | 0.0022 | 2026-04-22 | Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free a | |
CVE-2026-17737 |
medium | 5.0 | 0.0019 | 2026-07-30 | Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-56131 |
medium | 4.9 | 0.0018 | 2026-06-19 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within ha | |
CVE-2026-10639 |
medium | 4.8 | 0.0023 | 2026-06-16 | In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo | |
CVE-2026-73282 |
medium | 4.8 | 0.0016 | 2026-08-11 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remo | |
CVE-2026-86423 |
medium | 4.8 | 0.0011 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability | |
CVE-2026-86425 |
medium | 4.8 | 0.0015 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability | |
CVE-2026-69474 |
medium | 4.8 | 0.0065 | 2026-09-08 | Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over | |
CVE-2026-70077 |
medium | 4.7 | 0.0035 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to disclose information locally. | |
CVE-2026-70195 |
medium | 4.7 | 0.0026 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis | |
CVE-2026-83582 |
medium | 4.7 | 0.0035 | 2026-10-13 | Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information loca | |
CVE-2026-49167 |
medium | 4.7 | 0.0035 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-50312 |
medium | 4.7 | 0.0035 | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele | |
CVE-2026-23004 |
medium | 4.7 | 0.0016 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dst: fix races in rt6_uncached_ | |
CVE-2026-23207 |
medium | 4.7 | 0.0014 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect cur | |
CVE-2026-52757 |
medium | 4.6 | 0.0014 | 2026-06-10 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::me | |
CVE-2026-34757 |
medium | 4.4 | 0.0019 | 2026-04-09 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portabl | |
CVE-2026-66798 |
medium | 4.3 | 0.0079 | 2026-08-28 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-6362 |
medium | 4.3 | 0.0022 | 2026-04-15 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to poten | |
CVE-2026-10636 |
low | 3.7 | 0.0031 | 2026-06-16 | In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface | |
CVE-2026-11742 |
low | 3.6 | 0.0013 | 2026-08-07 | The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue | |
CVE-2026-8553 |
low | 3.1 | 0.0016 | 2026-05-14 | Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had com | |
CVE-2026-108333 |
low | 2.5 | 0.0013 | 2026-10-27 | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | |
CVE-2026-57438 |
low | 2.2 | 0.0013 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-54897 |
low | 2.1 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2, | |
CVE-2026-54898 |
low | 2.1 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-54522 |
low | 2.1 | 0.0023 | 2026-07-30 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1 | |
CVE-2026-95620 |
low | 2.1 | 0.0023 | 2026-10-23 | A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Netwo | |
CVE-2026-93586 |
low | 2.1 | 0.0010 | 2026-09-18 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the Imag | |
CVE-2026-54619 |
low | 2.0 | 0.0014 | 2026-07-28 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, rede | |
CVE-2026-54620 |
low | 2.0 | 0.0014 | 2026-07-28 | sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks | |
CVE-2026-14760 |
low | 1.9 | 0.0020 | 2026-07-05 | A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_see | |
CVE-2026-14788 |
low | 1.9 | 0.0020 | 2026-07-06 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulner | |
CVE-2026-18785 |
low | 1.9 | 0.0016 | 2026-08-04 | A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is | |
CVE-2026-19108 |
low | 1.9 | 0.0016 | 2026-08-06 | A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the func | |
CVE-2026-57236 |
low | 1.7 | 0.0043 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-57435 |
low | 1.7 | 0.0046 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-57436 |
low | 1.7 | 0.0040 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-57437 |
low | 1.7 | 0.0040 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-34983 |
low | 1.0 | 0.0012 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can resu | |
CVE-2018-15982 |
— | — | 0.8958 | — | Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability | KEV |
CVE-2020-3992 |
— | — | 0.8302 | — | VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the | KEV |
CVE-2021-26411 |
— | — | 0.8167 | — | Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. | KEV |
CVE-2021-22893 |
— | — | 0.4717 | — | Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthentic | KEV |
CVE-2021-34486 |
— | — | 0.0933 | — | Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege | KEV |
CVE-2022-26485 |
— | — | 0.1426 | — | Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be ex | KEV |