Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-100209 |
high | 8.8 | 0.0095 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-100211 |
high | 8.8 | 0.0093 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-100212 |
high | 8.8 | 0.0091 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-102214 |
high | 8.8 | 0.0038 | 2026-10-13 | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | |
CVE-2026-70215 |
high | 8.8 | 0.0093 | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a | |
CVE-2026-88144 |
high | 8.8 | 0.0093 | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a | |
CVE-2026-97010 |
high | 8.8 | 0.0084 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97738 |
high | 8.8 | 0.0086 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97745 |
high | 8.8 | 0.0093 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97775 |
high | 8.8 | 0.0084 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-108442 |
high | 8.8 | 0.0062 | 2026-10-15 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-108446 |
high | 8.8 | 0.0062 | 2026-10-15 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-69765 |
high | 8.8 | 0.0080 | 2026-10-13 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code o | |
CVE-2026-83771 |
high | 8.8 | 0.0062 | 2026-10-13 | Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate pri | |
CVE-2026-83862 |
high | 8.8 | 0.0041 | 2026-10-13 | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code ove | |
CVE-2026-88073 |
high | 8.8 | 0.0027 | 2026-10-13 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall | |
CVE-2026-97017 |
high | 8.8 | 0.0076 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97747 |
high | 8.8 | 0.0074 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97752 |
high | 8.8 | 0.0074 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97759 |
high | 8.8 | 0.0080 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2026-97771 |
high | 8.8 | 0.0074 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw | |
CVE-2023-25735 |
high | 8.8 | 0.0072 | 2023-06-02 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartmen | |
CVE-2023-25739 |
high | 8.8 | 0.0068 | 2023-06-02 | Module load requests that failed were not being checked as to whether or not they were cancelled cau | |
CVE-2023-29536 |
high | 8.8 | 0.0070 | 2023-06-02 | An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-con | |
CVE-2023-37202 |
high | 8.8 | 0.0076 | 2023-07-05 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartmen | |
CVE-2023-3600 |
high | 8.8 | 0.0063 | 2023-07-12 | During the worker lifecycle, a use-after-free condition could have occurred, which could have led to | |
CVE-2025-13014 |
high | 8.8 | 0.0032 | 2025-11-11 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ES | |
CVE-2025-13020 |
high | 8.8 | 0.0031 | 2025-11-11 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Fi | |
CVE-2026-5278 |
high | 8.8 | 0.0041 | 2026-04-01 | Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5280 |
high | 8.8 | 0.0039 | 2026-04-01 | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to ex | |
CVE-2026-5285 |
high | 8.8 | 0.0040 | 2026-04-01 | Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execut | |
CVE-2026-5286 |
high | 8.8 | 0.0039 | 2026-04-01 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute | |
CVE-2026-5287 |
high | 8.8 | 0.0051 | 2026-04-01 | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute | |
CVE-2026-32157 |
high | 8.8 | 0.0078 | 2026-04-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-6299 |
high | 8.8 | 0.0034 | 2026-04-15 | Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to ex | |
CVE-2026-6300 |
high | 8.8 | 0.0034 | 2026-04-15 | Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute | |
CVE-2026-6302 |
high | 8.8 | 0.0033 | 2026-04-15 | Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execut | |
CVE-2026-6303 |
high | 8.8 | 0.0037 | 2026-04-15 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execu | |
CVE-2026-6315 |
high | 8.8 | 0.0032 | 2026-04-15 | Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote a | |
CVE-2026-6316 |
high | 8.8 | 0.0034 | 2026-04-15 | Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execut | |
CVE-2026-6317 |
high | 8.8 | 0.0034 | 2026-04-15 | Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute | |
CVE-2026-6318 |
high | 8.8 | 0.0033 | 2026-04-15 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execu | |
CVE-2026-6358 |
high | 8.8 | 0.0029 | 2026-04-15 | Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker t | |
CVE-2026-6359 |
high | 8.8 | 0.0027 | 2026-04-15 | Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacke | |
CVE-2026-6360 |
high | 8.8 | 0.0025 | 2026-04-15 | Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to p | |
CVE-2026-7898 |
high | 8.8 | 0.0031 | 2026-05-06 | Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attac | |
CVE-2026-7901 |
high | 8.8 | 0.0027 | 2026-05-06 | Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to | |
CVE-2026-7906 |
high | 8.8 | 0.0027 | 2026-05-06 | Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute a | |
CVE-2026-7907 |
high | 8.8 | 0.0027 | 2026-05-06 | Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute a | |
CVE-2026-7921 |
high | 8.8 | 0.0027 | 2026-05-06 | Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to exe |