Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1100)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (532)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-113168 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e | |
CVE-2026-113174 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113177 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113179 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute | |
CVE-2026-113181 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113187 |
high | 8.8 | 0.0043 | 2026-10-20 | Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute a | |
CVE-2026-113190 |
high | 8.8 | 0.0039 | 2026-10-20 | Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to | |
CVE-2026-113191 |
high | 8.8 | 0.0039 | 2026-10-20 | Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attac | |
CVE-2026-113197 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute | |
CVE-2026-113198 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113200 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute | |
CVE-2026-113202 |
high | 8.8 | 0.0056 | 2026-10-20 | Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113203 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potential | |
CVE-2026-113204 |
high | 8.8 | 0.0048 | 2026-10-20 | Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed | |
CVE-2026-113205 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113207 |
high | 8.8 | 0.0042 | 2026-10-20 | Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remo | |
CVE-2026-113208 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113210 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attac | |
CVE-2026-113215 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113216 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2026-113217 |
high | 8.8 | 0.0047 | 2026-10-20 | Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a rem | |
CVE-2026-113218 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to | |
CVE-2026-113221 |
high | 8.8 | 0.0037 | 2026-10-20 | Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e | |
CVE-2026-113227 |
high | 8.8 | 0.0041 | 2026-10-20 | Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu | |
CVE-2026-113228 |
high | 8.8 | 0.0034 | 2026-10-20 | Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu | |
CVE-2026-113229 |
high | 8.8 | 0.0042 | 2026-10-20 | Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execut | |
CVE-2026-113236 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113240 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to po | |
CVE-2026-113250 |
high | 8.8 | 0.0043 | 2026-10-20 | Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potenti | |
CVE-2026-113251 |
high | 8.8 | 0.0040 | 2026-10-20 | Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute a | |
CVE-2026-113253 |
high | 8.8 | 0.0039 | 2026-10-20 | Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execut | |
CVE-2026-113255 |
high | 8.8 | 0.0039 | 2026-10-20 | Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote | |
CVE-2026-113256 |
high | 8.8 | 0.0043 | 2026-10-20 | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e | |
CVE-2026-113282 |
high | 8.8 | 0.0043 | 2026-10-20 | Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113293 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attac | |
CVE-2026-113323 |
high | 8.8 | 0.0044 | 2026-10-20 | Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote | |
CVE-2026-113344 |
high | 8.8 | 0.0043 | 2026-10-20 | Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e | |
CVE-2026-111804 |
high | 8.8 | 0.0030 | 2026-10-21 | Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handl | |
CVE-2026-53918 |
high | 8.8 | 0.0050 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.1 | |
CVE-2026-113170 |
high | 8.8 | 0.0033 | 2026-10-20 | Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-96192 |
high | 8.8 | — | 2026-10-29 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a netw | |
CVE-2026-96203 |
high | 8.8 | — | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile | |
CVE-2026-112402 |
high | 8.7 | 0.0059 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when Imagin | |
CVE-2026-35554 |
high | 8.7 | 0.0044 | 2026-04-07 | A race condition in the Apache Kafka Java producer client’s buffer pool management can cause message | |
CVE-2026-41218 |
high | 8.7 | 0.0026 | 2026-05-13 | When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASS | |
CVE-2026-12245 |
high | 8.7 | 0.0046 | 2026-06-25 | NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing | |
CVE-2026-71847 |
high | 8.7 | 0.0043 | 2026-08-07 | Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extensio | |
CVE-2026-17699 |
high | 8.6 | 0.0014 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentia | |
CVE-2026-70341 |
high | 8.5 | 0.0064 | 2026-09-11 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over | |
CVE-2026-50340 |
high | 8.5 | 0.0074 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network |