Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13796 |
critical | 9.6 | 0.0032 | 2026-06-30 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who | |
CVE-2026-14387 |
critical | 9.6 | 0.0029 | 2026-07-01 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potent | |
CVE-2026-34751 |
critical | 9.1 | 0.0031 | 2026-04-01 | Payload is a free and open source headless content management system. Prior to version 3.79.1 in @pa | |
CVE-2026-5274 |
high | 8.8 | 0.0043 | 2026-04-01 | Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to per | |
CVE-2026-7896 |
high | 8.8 | 0.0028 | 2026-05-06 | Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to poten | |
CVE-2026-7903 |
high | 8.8 | 0.0022 | 2026-05-06 | Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote at | |
CVE-2026-7973 |
high | 8.8 | 0.0022 | 2026-05-06 | Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-8519 |
high | 8.8 | 0.0023 | 2026-05-14 | Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attac | |
CVE-2026-8532 |
high | 8.8 | 0.0028 | 2026-05-14 | Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execut | |
CVE-2026-8577 |
high | 8.8 | 0.0025 | 2026-05-14 | Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to exec | |
CVE-2026-13938 |
high | 8.8 | 0.0034 | 2026-06-30 | Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perfo | |
CVE-2026-14430 |
high | 8.8 | 0.0041 | 2026-07-01 | Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute | |
CVE-2026-65052 |
high | 8.7 | 0.0058 | 2026-07-21 | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerab | |
CVE-2026-8534 |
high | 8.3 | 0.0021 | 2026-05-14 | Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a rem | |
CVE-2026-8573 |
high | 8.3 | 0.0023 | 2026-05-14 | Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote atta | |
CVE-2026-13281 |
high | 8.3 | 0.0026 | 2026-06-25 | Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had | |
CVE-2026-13801 |
high | 8.3 | 0.0030 | 2026-06-30 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who | |
CVE-2026-13841 |
high | 8.3 | 0.0039 | 2026-06-30 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c | |
CVE-2026-14389 |
high | 8.3 | 0.0025 | 2026-07-01 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had c | |
CVE-2026-13974 |
high | 8.1 | 0.0029 | 2026-06-30 | Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-67363 |
high | 7.7 | 0.0056 | 2026-08-19 | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The | |
CVE-2026-5277 |
high | 7.5 | 0.0033 | 2026-04-01 | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attac | |
CVE-2026-8510 |
high | 7.5 | 0.0995 | 2026-05-14 | Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attack | |
CVE-2026-7571 |
high | 7.1 | 0.0042 | 2026-05-19 | A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID | |
CVE-2026-115450 |
high | 7.1 | 0.0024 | 2026-10-22 | External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of Marco | |
CVE-2026-16453 |
high | 7.1 | 0.0019 | 2026-10-16 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to | |
CVE-2026-14069 |
medium | 6.5 | 0.0029 | 2026-06-30 | Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtai | |
CVE-2026-56877 |
medium | 6.3 | 0.0039 | 2026-07-13 | The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validat | |
CVE-2026-42655 |
medium | 5.9 | 0.0025 | 2026-06-15 | Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. | |
CVE-2026-14391 |
medium | 5.3 | 0.0023 | 2026-07-01 | Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-59817 |
medium | 5.3 | 0.0040 | 2026-07-09 | Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation che | |
CVE-2026-7484 |
medium | 5.3 | 0.0033 | 2026-07-24 | External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS | |
CVE-2026-7942 |
medium | 4.3 | 0.0020 | 2026-05-06 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak | |
CVE-2026-7969 |
medium | 4.3 | 0.0022 | 2026-05-06 | Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who ha | |
CVE-2026-8559 |
medium | 4.3 | 0.0018 | 2026-05-14 | Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed | |
CVE-2026-8567 |
medium | 4.3 | 0.0018 | 2026-05-14 | Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attac | |
CVE-2026-7912 |
medium | 4.2 | 0.0015 | 2026-05-06 | Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker |