Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-109346 |
high | 8.5 | 0.0028 | 2026-10-12 | better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the | |
CVE-2026-28964 |
high | 7.5 | 0.0032 | 2026-05-11 | An inconsistent user interface issue was addressed with improved state management. This issue is fix | |
CVE-2026-14114 |
high | 7.5 | 0.0023 | 2026-06-30 | Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 al | |
CVE-2026-60658 |
high | 7.5 | 0.0016 | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-3861 |
high | 7.1 | 0.0031 | 2026-04-16 | LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where op | |
CVE-2025-10290 |
medium | 6.5 | 0.0025 | 2025-09-16 | Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but wo | |
CVE-2026-42891 |
medium | 6.5 | 0.0029 | 2026-05-12 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) all | |
CVE-2026-13892 |
medium | 6.5 | 0.0028 | 2026-06-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowe | |
CVE-2026-13985 |
medium | 6.5 | 0.0028 | 2026-06-30 | Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-13988 |
medium | 6.5 | 0.0029 | 2026-06-30 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-13996 |
medium | 6.5 | 0.0029 | 2026-06-30 | Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14002 |
medium | 6.5 | 0.0029 | 2026-06-30 | Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14014 |
medium | 6.5 | 0.0029 | 2026-06-30 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14381 |
medium | 6.5 | 0.0026 | 2026-07-01 | Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote att | |
CVE-2026-14404 |
medium | 6.5 | 0.0027 | 2026-07-01 | Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote atta | |
CVE-2026-16403 |
medium | 6.5 | 0.0035 | 2026-07-21 | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunder | |
CVE-2026-17792 |
medium | 6.5 | 0.0029 | 2026-07-30 | Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowe | |
CVE-2026-17793 |
medium | 6.5 | 0.0029 | 2026-07-30 | Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed | |
CVE-2026-17819 |
medium | 6.5 | 0.0029 | 2026-07-30 | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a rem | |
CVE-2026-17828 |
medium | 6.5 | 0.0029 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17835 |
medium | 6.5 | 0.0029 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17838 |
medium | 6.5 | 0.0029 | 2026-07-30 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a rem | |
CVE-2026-17839 |
medium | 6.5 | 0.0029 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17840 |
medium | 6.5 | 0.0029 | 2026-07-30 | Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-13356 |
medium | 6.3 | 0.0022 | 2026-07-07 | A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialo | |
CVE-2026-45150 |
medium | 6.3 | 0.0031 | 2026-07-15 | Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly | |
CVE-2026-116631 |
medium | 5.4 | 0.0021 | 2026-10-26 | A malicious web page could open a tel link in a window that was showing a different website, causing | |
CVE-2026-116632 |
medium | 5.4 | 0.0021 | 2026-10-26 | A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potenti | |
CVE-2026-45488 |
medium | 5.4 | 0.0036 | 2026-07-03 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) all | |
CVE-2026-33119 |
medium | 5.4 | 0.0031 | 2026-04-10 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) all | |
CVE-2026-7935 |
medium | 5.4 | 0.0019 | 2026-05-06 | Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote atta | |
CVE-2026-8006 |
medium | 5.4 | 0.0012 | 2026-05-06 | Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attac | |
CVE-2026-8008 |
medium | 5.4 | 0.0012 | 2026-05-06 | Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker | |
CVE-2026-8015 |
medium | 5.4 | 0.0016 | 2026-05-06 | Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attac | |
CVE-2026-8019 |
medium | 5.4 | 0.0016 | 2026-05-06 | Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote a | |
CVE-2026-8561 |
medium | 5.4 | 0.0018 | 2026-05-14 | Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attack | |
CVE-2026-14132 |
medium | 5.4 | 0.0022 | 2026-06-30 | Inappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14142 |
medium | 5.4 | 0.0021 | 2026-06-30 | Inappropriate implementation in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-17812 |
medium | 5.4 | 0.0026 | 2026-07-30 | Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a | |
CVE-2026-17874 |
medium | 5.4 | 0.0026 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17913 |
medium | 5.4 | 0.0026 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17915 |
medium | 5.4 | 0.0026 | 2026-07-30 | Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-18487 |
medium | 5.4 | 0.0034 | 2026-08-06 | A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fa | |
CVE-2026-74975 |
medium | 5.4 | 0.0025 | 2026-08-18 | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Fi | |
CVE-2026-13989 |
medium | 5.3 | 0.0027 | 2026-06-30 | Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14153 |
medium | 5.3 | 0.0026 | 2026-06-30 | Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-9106 |
medium | 4.8 | 0.0036 | 2026-06-30 | A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAut | |
CVE-2026-14154 |
medium | 4.8 | 0.0019 | 2026-06-30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker | |
CVE-2026-44659 |
medium | 4.7 | 0.0016 | 2026-05-11 | Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostna | |
CVE-2026-34258 |
medium | 4.7 | 0.0025 | 2026-05-12 | SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the S |