Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2023-53664 |
medium | 5.5 | 0.0013 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential null ptr der | |
CVE-2023-53678 |
medium | 5.5 | 0.0015 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend wi | |
CVE-2023-53681 |
medium | 5.5 | 0.0015 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_al | |
CVE-2023-53686 |
medium | 5.5 | 0.0013 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix null-ptr-der | |
CVE-2026-17009 |
medium | 5.5 | 0.0012 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-98098 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_na | |
CVE-2025-60479 |
medium | 5.5 | 0.0019 | 2026-10-21 | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Projec | |
CVE-2025-60489 |
medium | 5.5 | 0.0019 | 2026-10-21 | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC | |
CVE-2025-60487 |
medium | 5.5 | 0.0018 | 2026-10-21 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4 | |
CVE-2025-60493 |
medium | 5.5 | 0.0018 | 2026-10-21 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4B | |
CVE-2025-60469 |
medium | 5.5 | 0.0019 | 2026-10-21 | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) o | |
CVE-2026-83571 |
medium | 5.5 | 0.0047 | 2026-10-13 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose informat | |
CVE-2023-33121 |
medium | 5.5 | 0.0018 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V1 | |
CVE-2023-6915 |
medium | 5.5 | 0.0028 | 2024-01-15 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issu | |
CVE-2026-23353 |
medium | 5.5 | 0.0013 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offli | |
CVE-2026-5745 |
medium | 5.5 | 0.0016 | 2026-04-07 | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing l | |
CVE-2026-32216 |
medium | 5.5 | 0.0037 | 2026-04-14 | Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny | |
CVE-2026-6526 |
medium | 5.5 | 0.0012 | 2026-04-30 | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 | |
CVE-2026-42442 |
medium | 5.5 | 0.0011 | 2026-05-12 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a null-pointer derefer | |
CVE-2026-1288 |
medium | 5.5 | 0.0012 | 2026-06-17 | A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Rev | |
CVE-2026-48985 |
medium | 5.5 | 0.0016 | 2026-06-18 | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions 0.9.1 | |
CVE-2026-10648 |
medium | 5.5 | 0.0015 | 2026-06-29 | mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() | |
CVE-2026-48267 |
medium | 5.5 | 0.0023 | 2026-07-06 | DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability tha | |
CVE-2026-15171 |
medium | 5.5 | 0.0014 | 2026-07-08 | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of servic | |
CVE-2026-10670 |
medium | 5.5 | 0.0015 | 2026-07-14 | The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_ | |
CVE-2026-64314 |
medium | 5.5 | 0.0016 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - vali | |
CVE-2026-45204 |
medium | 5.5 | 0.0015 | 2026-08-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger | |
CVE-2026-98119 |
medium | 5.5 | 0.0014 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write w | |
CVE-2026-98121 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL poi | |
CVE-2026-98129 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer | |
CVE-2026-95640 |
medium | 5.5 | 0.0017 | 2026-10-13 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an ap | |
CVE-2026-112259 |
medium | 5.5 | 0.0015 | 2026-10-19 | A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause | |
CVE-2026-116497 |
medium | 5.5 | 0.0014 | 2026-10-26 | A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request | |
CVE-2026-98059 |
medium | 5.5 | 0.0017 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait ar | |
CVE-2026-6778 |
medium | 5.3 | 0.0026 | 2026-04-21 | Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 | |
CVE-2026-42800 |
medium | 5.3 | 0.0024 | 2026-04-30 | NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) | |
CVE-2026-33007 |
medium | 5.3 | 0.0051 | 2026-05-04 | A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows | |
CVE-2026-20457 |
medium | 5.3 | 0.0029 | 2026-07-01 | In Modem, there is a possible system crash due to improper input validation. This could lead to remo | |
CVE-2026-73502 |
medium | 5.3 | 0.0051 | 2026-08-18 | kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.Val | |
CVE-2026-16829 |
medium | 5.3 | 0.0025 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-82953 |
medium | 5.3 | 0.0048 | 2026-10-21 | NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on al | |
CVE-2026-17574 |
medium | 5.2 | 0.0015 | 2026-07-27 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an | |
CVE-2026-47271 |
medium | 5.1 | 0.0012 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, s | |
CVE-2026-6845 |
medium | 5.0 | 0.0015 | 2026-04-22 | A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a | |
CVE-2025-60477 |
medium | 5.0 | 0.0011 | 2026-06-03 | A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filt | |
CVE-2026-33600 |
medium | 4.9 | 0.0052 | 2026-04-22 | An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by | |
CVE-2026-33601 |
medium | 4.9 | 0.0051 | 2026-04-22 | If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zo | |
CVE-2026-10659 |
medium | 4.7 | 0.0013 | 2026-07-07 | The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ | |
CVE-2026-44710 |
medium | 4.6 | 0.0018 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, s | |
CVE-2026-10656 |
medium | 4.6 | 0.0028 | 2026-07-05 | The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) |