Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14405 |
critical | 9.6 | 0.0050 | 2026-07-01 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute | |
CVE-2026-13825 |
high | 8.8 | 0.0033 | 2026-06-30 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to poten | |
CVE-2026-15132 |
high | 8.8 | 0.0045 | 2026-07-08 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execut | |
CVE-2026-6311 |
high | 8.3 | 0.0027 | 2026-04-15 | Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a rem | |
CVE-2026-14413 |
high | 8.3 | 0.0021 | 2026-07-01 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had | |
CVE-2026-112893 |
high | 8.2 | 0.0055 | 2026-10-19 | Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph point | |
CVE-2025-10021 |
high | 7.0 | 0.0015 | 2025-12-22 | A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static ver | |
CVE-2026-112898 |
medium | 6.9 | 0.0034 | 2026-10-19 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack | |
CVE-2024-9355 |
medium | 6.5 | 0.0030 | 2024-10-01 | A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly caus | |
CVE-2026-7924 |
medium | 6.5 | 0.0024 | 2026-05-06 | Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtai | |
CVE-2026-7982 |
medium | 6.5 | 0.0024 | 2026-05-06 | Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to | |
CVE-2026-13833 |
medium | 6.5 | 0.0037 | 2026-06-30 | Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13923 |
medium | 6.5 | 0.0035 | 2026-06-30 | Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13940 |
medium | 6.5 | 0.0017 | 2026-06-30 | Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local n | |
CVE-2026-13943 |
medium | 6.5 | 0.0035 | 2026-06-30 | Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13958 |
medium | 6.5 | 0.0032 | 2026-06-30 | Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-14008 |
medium | 6.5 | 0.0032 | 2026-06-30 | Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14010 |
medium | 6.5 | 0.0032 | 2026-06-30 | Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-14051 |
medium | 6.5 | 0.0032 | 2026-06-30 | Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh | |
CVE-2026-14070 |
medium | 6.5 | 0.0032 | 2026-06-30 | Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtai | |
CVE-2026-14088 |
medium | 6.5 | 0.0032 | 2026-06-30 | Uninitialized Use in Canvas in Google Chrome on Android prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-14125 |
medium | 6.5 | 0.0028 | 2026-06-30 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obta | |
CVE-2026-14399 |
medium | 6.5 | 0.0035 | 2026-07-01 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtai | |
CVE-2026-14402 |
medium | 6.5 | 0.0022 | 2026-07-01 | Uninitialized Use in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attac | |
CVE-2026-14408 |
medium | 6.5 | 0.0035 | 2026-07-01 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtai | |
CVE-2026-14421 |
medium | 6.5 | 0.0035 | 2026-07-01 | Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attac | |
CVE-2026-15109 |
medium | 6.5 | 0.0029 | 2026-07-08 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obt | |
CVE-2026-15766 |
medium | 6.5 | 0.0040 | 2026-07-14 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obta | |
CVE-2026-15770 |
medium | 6.5 | 0.0035 | 2026-07-14 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain | |
CVE-2026-17667 |
medium | 6.5 | 0.0052 | 2026-07-30 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak | |
CVE-2026-17668 |
medium | 6.5 | 0.0052 | 2026-07-30 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak | |
CVE-2026-17707 |
medium | 6.5 | 0.0035 | 2026-07-30 | Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17714 |
medium | 6.5 | 0.0052 | 2026-07-30 | Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obta | |
CVE-2026-17759 |
medium | 6.5 | 0.0035 | 2026-07-30 | Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obt | |
CVE-2026-17946 |
medium | 6.5 | 0.0035 | 2026-07-30 | Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had | |
CVE-2026-17968 |
medium | 6.5 | 0.0035 | 2026-07-30 | Uninitialized Use in WebXR in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17992 |
medium | 6.5 | 0.0026 | 2026-07-30 | Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-55990 |
medium | 5.9 | 0.0025 | 2026-07-22 | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnsc | |
CVE-2026-64699 |
medium | 5.5 | 0.0016 | 2026-07-27 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in ma | |
CVE-2026-7955 |
medium | 5.3 | 0.0024 | 2026-05-06 | Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had c | |
CVE-2026-8020 |
medium | 5.3 | 0.0021 | 2026-05-06 | Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-13023 |
medium | 5.3 | 0.0029 | 2026-06-24 | Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had | |
CVE-2026-13030 |
medium | 5.3 | 0.0029 | 2026-06-24 | Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attack | |
CVE-2026-13947 |
medium | 5.3 | 0.0031 | 2026-06-30 | Uninitialized Use in XR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had co | |
CVE-2026-13950 |
medium | 5.3 | 0.0031 | 2026-06-30 | Uninitialized Use in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c | |
CVE-2026-13969 |
medium | 5.3 | 0.0029 | 2026-06-30 | Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13970 |
medium | 5.3 | 0.0029 | 2026-06-30 | Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | |
CVE-2026-13971 |
medium | 5.3 | 0.0038 | 2026-06-30 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | |
CVE-2026-19146 |
medium | 5.3 | 0.0031 | 2026-08-06 | Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attack | |
CVE-2026-7972 |
medium | 4.3 | 0.0024 | 2026-05-06 | Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had c |