Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13915 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-13918 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-13965 |
high | 8.8 | 0.0041 | 2026-06-30 | Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execut | |
CVE-2026-14005 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-14006 |
high | 8.8 | 0.0041 | 2026-06-30 | Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ex | |
CVE-2026-14024 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-14025 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who | |
CVE-2026-14027 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in SignIn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convi | |
CVE-2026-14040 |
high | 8.8 | 0.0026 | 2026-06-30 | Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinc | |
CVE-2026-14067 |
high | 8.8 | 0.0041 | 2026-06-30 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-14091 |
high | 8.8 | 0.0038 | 2026-06-30 | Use after free in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to exec | |
CVE-2026-14099 |
high | 8.8 | 0.0032 | 2026-06-30 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-14102 |
high | 8.8 | 0.0034 | 2026-06-30 | Use after free in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to pot | |
CVE-2026-14107 |
high | 8.8 | 0.0038 | 2026-06-30 | Use after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ex | |
CVE-2026-14108 |
high | 8.8 | 0.0035 | 2026-06-30 | Use after free in PDFium in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execut | |
CVE-2026-14149 |
high | 8.8 | 0.0041 | 2026-06-30 | Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker t | |
CVE-2026-14393 |
high | 8.8 | 0.0041 | 2026-07-01 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar | |
CVE-2026-14394 |
high | 8.8 | 0.0034 | 2026-07-01 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentiall | |
CVE-2026-14403 |
high | 8.8 | 0.0041 | 2026-07-01 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar | |
CVE-2026-14432 |
high | 8.8 | 0.0041 | 2026-07-01 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar | |
CVE-2026-15107 |
high | 8.8 | 0.0041 | 2026-07-08 | Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to ex | |
CVE-2026-15110 |
high | 8.8 | 0.0026 | 2026-07-08 | Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convin | |
CVE-2026-15112 |
high | 8.8 | 0.0034 | 2026-07-08 | Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potent | |
CVE-2026-15116 |
high | 8.8 | 0.0041 | 2026-07-08 | Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execut | |
CVE-2026-15118 |
high | 8.8 | 0.0041 | 2026-07-08 | Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execut | |
CVE-2026-15121 |
high | 8.8 | 0.0052 | 2026-07-08 | Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execu | |
CVE-2026-15126 |
high | 8.8 | 0.0041 | 2026-07-08 | Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execut | |
CVE-2026-15129 |
high | 8.8 | 0.0034 | 2026-07-08 | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potent | |
CVE-2026-15133 |
high | 8.8 | 0.0041 | 2026-07-08 | Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker | |
CVE-2026-63831 |
high | 8.8 | 0.0031 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_d | |
CVE-2026-63944 |
high | 8.8 | 0.0033 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in | |
CVE-2026-15902 |
high | 8.8 | 0.0041 | 2026-07-20 | Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute | |
CVE-2026-15904 |
high | 8.8 | 0.0034 | 2026-07-20 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker | |
CVE-2026-16362 |
high | 8.8 | 0.0044 | 2026-07-21 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Fi | |
CVE-2026-16423 |
high | 8.8 | 0.0034 | 2026-07-21 | Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convince | |
CVE-2026-16805 |
high | 8.8 | 0.0041 | 2026-07-23 | Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execut | |
CVE-2026-16806 |
high | 8.8 | 0.0052 | 2026-07-23 | Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execu | |
CVE-2026-64438 |
high | 8.8 | 0.0014 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work te | |
CVE-2026-17658 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar | |
CVE-2026-17661 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execut | |
CVE-2026-17665 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar | |
CVE-2026-17685 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to exec | |
CVE-2026-17694 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute a | |
CVE-2026-17719 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute | |
CVE-2026-17729 |
high | 8.8 | 0.0037 | 2026-07-30 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compr | |
CVE-2026-17752 |
high | 8.8 | 0.0034 | 2026-07-30 | Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to | |
CVE-2026-17778 |
high | 8.8 | 0.0038 | 2026-07-30 | Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ex | |
CVE-2026-17784 |
high | 8.8 | 0.0034 | 2026-07-30 | Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who | |
CVE-2026-17807 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar | |
CVE-2026-17836 |
high | 8.8 | 0.0041 | 2026-07-30 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar |