Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-22619 |
critical | 9.9 | 0.0032 | 2026-04-16 | Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, w | |
CVE-2026-40342 |
critical | 9.9 | 0.0069 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-16860 |
critical | 9.9 | 0.0075 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code d | |
CVE-2026-7870 |
high | 8.8 | 0.0034 | 2026-06-11 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified li | |
CVE-2026-54232 |
high | 8.8 | 0.0056 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM | |
CVE-2026-9169 |
high | 8.8 | 0.0017 | 2026-08-07 | DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attack | |
CVE-2026-34632 |
high | 8.6 | 0.0027 | 2026-04-15 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that cou | |
CVE-2026-48388 |
high | 8.6 | 0.0031 | 2026-07-28 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that cou | |
CVE-2025-40827 |
high | 8.5 | 0.0017 | 2025-11-11 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2 | |
CVE-2026-7279 |
high | 8.5 | 0.0011 | 2026-04-28 | AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated loc | |
CVE-2026-6788 |
high | 8.5 | 0.0013 | 2026-05-06 | Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious | |
CVE-2026-7373 |
high | 8.5 | 0.0017 | 2026-05-15 | Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gai | |
CVE-2026-8637 |
high | 8.5 | 0.0013 | 2026-06-10 | A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client appl | |
CVE-2026-11879 |
high | 8.5 | 0.0011 | 2026-06-12 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execu | |
CVE-2026-11967 |
high | 8.5 | 0.0011 | 2026-06-12 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execu | |
CVE-2026-5064 |
high | 8.5 | 0.0011 | 2026-06-15 | Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC produ | |
CVE-2026-18656 |
high | 8.5 | 0.0022 | 2026-08-04 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remo | |
CVE-2026-18657 |
high | 8.5 | 0.0023 | 2026-08-04 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remot | |
CVE-2026-91093 |
high | 8.5 | 0.0016 | 2026-10-23 | A potential security vulnerability has been identified in HP One Agent for certain HP PC products, w | |
CVE-2023-53937 |
high | 8.5 | 0.0022 | 2025-12-18 | Hubstaff 1.6.13 and 1.6.14 contain a DLL search order hijacking vulnerability that allows attackers | |
CVE-2026-28704 |
high | 8.4 | 0.0016 | 2026-04-10 | Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same | |
CVE-2026-32679 |
high | 8.4 | 0.0016 | 2026-04-23 | The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerF | |
CVE-2026-21661 |
high | 8.4 | 0.0011 | 2026-05-06 | An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Levera | |
CVE-2026-44612 |
high | 8.4 | 0.0012 | 2026-05-13 | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Li | |
CVE-2026-56437 |
high | 8.4 | 0.0018 | 2026-07-08 | Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL f | |
CVE-2026-0487 |
high | 8.4 | 0.0021 | 2026-07-14 | SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from a | |
CVE-2026-42936 |
high | 8.4 | 0.0018 | 2026-07-15 | The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at t | |
CVE-2026-9593 |
high | 8.4 | 0.0017 | 2026-08-03 | A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host s | |
CVE-2026-13133 |
high | 8.4 | 0.0017 | 2026-08-10 | A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, wher | |
CVE-2026-103665 |
high | 8.4 | — | 2026-10-29 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load | |
CVE-2026-44358 |
high | 8.2 | 0.0018 | 2026-05-28 | Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitH | |
CVE-2026-48363 |
high | 8.2 | 0.0027 | 2026-07-13 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element | |
CVE-2026-48364 |
high | 8.2 | 0.0027 | 2026-07-13 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element | |
CVE-2026-32172 |
high | 8.0 | 0.0034 | 2026-04-23 | Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute | |
CVE-2025-60749 |
high | 7.8 | 0.0016 | 2025-10-31 | DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup | |
CVE-2026-69923 |
high | 7.8 | 0.0058 | 2026-10-13 | Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges l | |
CVE-2026-5397 |
high | 7.8 | 0.0013 | 2026-04-15 | It has been identified that a vulnerability (CWE-427) exists in the UPS (Uninterruptible Power Suppl | |
CVE-2026-42171 |
high | 7.8 | 0.0021 | 2026-04-24 | NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp director | |
CVE-2026-40004 |
high | 7.8 | 0.0014 | 2026-05-07 | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An | |
CVE-2026-44406 |
high | 7.8 | 0.0016 | 2026-05-07 | ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent. | |
CVE-2026-10847 |
high | 7.8 | 0.0012 | 2026-06-11 | A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. | |
CVE-2026-48272 |
high | 7.8 | 0.0023 | 2026-07-14 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could r | |
CVE-2026-50773 |
high | 7.8 | 0.0027 | 2026-08-17 | An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to ex | |
CVE-2026-92202 |
high | 7.8 | 0.0022 | 2026-10-21 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability | |
CVE-2026-104349 |
high | 7.3 | 0.0016 | 2026-10-27 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could r | |
CVE-2026-47092 |
high | 7.3 | 0.0051 | 2026-05-18 | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability tha | |
CVE-2026-11958 |
high | 7.3 | 0.0010 | 2026-06-18 | Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, ve | |
CVE-2026-6645 |
high | 7.3 | 0.0018 | 2026-06-22 | An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the Pa | |
CVE-2026-16519 |
high | 7.3 | 0.0017 | 2026-07-24 | A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The | |
CVE-2026-8164 |
high | 7.3 | 0.0016 | 2026-07-28 | Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade |