Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (837)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-16353 |
critical | 9.8 | 0.0060 | 2026-07-21 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-97767 |
high | 8.8 | 0.0060 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network | |
CVE-2023-29539 |
high | 8.8 | 0.0074 | 2023-06-02 | When handling the filename directive in the Content-Disposition header, the filename would be trunca | |
CVE-2026-112405 |
high | 8.7 | 0.0053 | 2026-10-19 | Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference | |
CVE-2026-111107 |
high | 8.7 | 0.0036 | 2026-10-27 | A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a r | |
CVE-2026-42409 |
high | 8.7 | 0.0026 | 2026-05-13 | When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are confi | |
CVE-2026-55204 |
high | 8.7 | 0.0048 | 2026-06-18 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability i | |
CVE-2026-9716 |
high | 8.7 | 0.0046 | 2026-06-25 | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition | |
CVE-2026-13084 |
high | 8.7 | 0.0061 | 2026-07-03 | A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticate | |
CVE-2026-60109 |
high | 8.7 | 0.0092 | 2026-07-09 | Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyze | |
CVE-2026-50032 |
high | 8.7 | 0.0046 | 2026-07-23 | A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network a | |
CVE-2026-67184 |
high | 8.7 | 0.0061 | 2026-07-28 | TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated | |
CVE-2026-111733 |
high | 8.7 | — | 2026-10-29 | P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a v | |
CVE-2026-111736 |
high | 8.7 | — | 2026-10-29 | P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit | |
CVE-2026-64045 |
high | 8.4 | 0.0019 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer poi | |
CVE-2026-117610 |
high | 8.2 | 0.0043 | 2026-10-28 | libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProces | |
CVE-2026-28224 |
high | 8.2 | 0.0046 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-15352 |
high | 8.2 | 0.0061 | 2026-07-16 | A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). T | |
CVE-2026-18064 |
high | 8.2 | 0.0061 | 2026-07-30 | An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) ap | |
CVE-2026-19024 |
high | 8.2 | 0.0019 | 2026-08-05 | NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denia | |
CVE-2026-112392 |
high | 8.2 | 0.0059 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference inv | |
CVE-2026-112381 |
high | 8.2 | 0.0035 | 2026-10-21 | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn d | |
CVE-2026-10678 |
high | 8.1 | 0.0039 | 2026-07-21 | The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes | |
CVE-2026-70566 |
high | 7.8 | 0.0038 | 2026-10-13 | Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges loc | |
CVE-2026-50315 |
high | 7.8 | 0.0033 | 2026-07-14 | Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privi | |
CVE-2026-50673 |
high | 7.8 | 0.0021 | 2026-07-14 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-96953 |
high | 7.8 | 0.0030 | 2026-10-13 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author | |
CVE-2026-48097 |
high | 7.8 | 0.0023 | 2026-08-07 | NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a use | |
CVE-2023-22839 |
high | 7.5 | 0.0063 | 2023-02-01 | On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x be | |
CVE-2025-60335 |
high | 7.5 | 0.0213 | 2025-10-22 | A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows att | |
CVE-2025-50950 |
high | 7.5 | 0.0037 | 2025-10-23 | Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup fun | |
CVE-2026-16817 |
high | 7.5 | 0.0055 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-57195 |
high | 7.5 | 0.0057 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-65681 |
high | 7.5 | 0.0117 | 2026-08-11 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny ser | |
CVE-2026-59132 |
high | 7.5 | 0.0117 | 2026-08-11 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a ne | |
CVE-2026-83665 |
high | 7.5 | 0.0136 | 2026-10-13 | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over | |
CVE-2026-84017 |
high | 7.5 | 0.0112 | 2026-10-13 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized | |
CVE-2023-29180 |
high | 7.5 | 0.0280 | 2024-02-22 | A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 thro | |
CVE-2026-31931 |
high | 7.5 | 0.0035 | 2026-04-02 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of th | |
CVE-2025-66769 |
high | 7.5 | 0.0044 | 2026-04-13 | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denia | |
CVE-2026-32071 |
high | 7.5 | 0.0106 | 2026-04-14 | Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an una | |
CVE-2026-28212 |
high | 7.5 | 0.0050 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, | |
CVE-2026-40355 |
high | 7.5 | 0.0065 | 2026-04-28 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application ca | |
CVE-2026-29169 |
high | 7.5 | 0.0059 | 2026-05-04 | A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an att | |
CVE-2026-44602 |
high | 7.5 | 0.0033 | 2026-05-07 | Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TRO | |
CVE-2026-41642 |
high | 7.5 | 0.0050 | 2026-05-07 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. | |
CVE-2026-42285 |
high | 7.5 | 0.0042 | 2026-05-07 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. | |
CVE-2026-39836 |
high | 7.5 | 0.0063 | 2026-05-07 | The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). | |
CVE-2026-8359 |
high | 7.5 | 0.0034 | 2026-05-27 | When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll | |
CVE-2026-8360 |
high | 7.5 | 0.0034 | 2026-05-27 | Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfile |