Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1854)
CWE-416 (1298)
CWE-862 (1188)
CWE-89 (1100)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (849)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (532)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-58083 |
high | 8.4 | 0.0017 | 2026-08-19 | While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be | |
CVE-2026-54128 |
high | 8.4 | 0.0036 | 2026-07-14 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. | |
CVE-2026-32190 |
high | 8.4 | 0.0033 | 2026-04-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | |
CVE-2026-7111 |
high | 8.4 | 0.0016 | 2026-04-29 | Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend th | |
CVE-2026-40358 |
high | 8.4 | 0.0037 | 2026-05-12 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local | |
CVE-2026-40361 |
high | 8.4 | 0.0060 | 2026-05-12 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | |
CVE-2026-40366 |
high | 8.4 | 0.0038 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an una | |
CVE-2026-12921 |
high | 8.4 | 0.0019 | 2026-06-25 | In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by a | |
CVE-2026-42958 |
high | 8.4 | 0.0019 | 2026-07-07 | The application contains a use-after-free vulnerability that can be exploited to cause memory corrup | |
CVE-2026-17716 |
high | 8.4 | 0.0014 | 2026-07-30 | Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to | |
CVE-2026-71968 |
high | 8.4 | 0.0014 | 2026-08-10 | OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Tr | |
CVE-2026-58287 |
high | 8.3 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-58288 |
high | 8.3 | 0.0061 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov | |
CVE-2026-6297 |
high | 8.3 | 0.0020 | 2026-04-15 | Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged | |
CVE-2026-6304 |
high | 8.3 | 0.0025 | 2026-04-15 | Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who ha | |
CVE-2026-6309 |
high | 8.3 | 0.0025 | 2026-04-15 | Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had com | |
CVE-2026-6310 |
high | 8.3 | 0.0025 | 2026-04-15 | Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had co | |
CVE-2026-7911 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker | |
CVE-2026-7917 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote att | |
CVE-2026-7918 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had comp | |
CVE-2026-7919 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had com | |
CVE-2026-7920 |
high | 8.3 | 0.0022 | 2026-05-06 | Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had com | |
CVE-2026-7922 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to | |
CVE-2026-7956 |
high | 8.3 | 0.0022 | 2026-05-06 | Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who h | |
CVE-2026-7970 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in TopChrome in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who ha | |
CVE-2026-7975 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had | |
CVE-2026-7985 |
high | 8.3 | 0.0021 | 2026-05-06 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had comp | |
CVE-2026-8001 |
high | 8.3 | 0.0018 | 2026-05-06 | Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a | |
CVE-2026-8512 |
high | 8.3 | 0.0025 | 2026-05-14 | Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who | |
CVE-2026-8513 |
high | 8.3 | 0.0021 | 2026-05-14 | Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacke | |
CVE-2026-8514 |
high | 8.3 | 0.0021 | 2026-05-14 | Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had co | |
CVE-2026-8515 |
high | 8.3 | 0.0021 | 2026-05-14 | Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinc | |
CVE-2026-8523 |
high | 8.3 | 0.0021 | 2026-05-14 | Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had co | |
CVE-2026-8530 |
high | 8.3 | 0.0027 | 2026-05-14 | Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attac | |
CVE-2026-8533 |
high | 8.3 | 0.0021 | 2026-05-14 | Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker w | |
CVE-2026-8542 |
high | 8.3 | 0.0021 | 2026-05-14 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker | |
CVE-2026-8574 |
high | 8.3 | 0.0018 | 2026-05-14 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker | |
CVE-2026-8575 |
high | 8.3 | 0.0018 | 2026-05-14 | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had comp | |
CVE-2026-12008 |
high | 8.3 | 0.0025 | 2026-06-11 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attac | |
CVE-2026-12011 |
high | 8.3 | 0.0025 | 2026-06-11 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attac | |
CVE-2026-12014 |
high | 8.3 | 0.0017 | 2026-06-11 | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local net | |
CVE-2026-12023 |
high | 8.3 | 0.0023 | 2026-06-11 | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who | |
CVE-2026-12028 |
high | 8.3 | 0.0023 | 2026-06-11 | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker | |
CVE-2026-12029 |
high | 8.3 | 0.0019 | 2026-06-11 | Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke | |
CVE-2026-12437 |
high | 8.3 | 0.0030 | 2026-06-17 | Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote atta | |
CVE-2026-12451 |
high | 8.3 | 0.0018 | 2026-06-17 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attac | |
CVE-2026-12464 |
high | 8.3 | 0.0022 | 2026-06-17 | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had | |
CVE-2026-12467 |
high | 8.3 | 0.0022 | 2026-06-17 | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who | |
CVE-2026-13804 |
high | 8.3 | 0.0030 | 2026-06-30 | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who h | |
CVE-2026-13823 |
high | 8.3 | 0.0030 | 2026-06-30 | Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com |