Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-49176 |
high | 7.8 | 0.0033 | 2026-07-14 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate priv | |
CVE-2026-50469 |
high | 7.8 | 0.0037 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Projected File System allo | |
CVE-2026-58636 |
high | 7.8 | 0.0037 | 2026-07-14 | Improper link resolution before file access ('link following') in Window PC Manager allows an author | |
CVE-2026-62812 |
high | 7.8 | 0.0037 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth | |
CVE-2026-102202 |
high | 7.8 | 0.0041 | 2026-10-13 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth | |
CVE-2026-102204 |
high | 7.8 | 0.0040 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows | |
CVE-2026-96225 |
high | 7.8 | 0.0041 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker | |
CVE-2026-96231 |
high | 7.8 | 0.0041 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker | |
CVE-2026-96243 |
high | 7.8 | 0.0033 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows WalletService allows an au | |
CVE-2026-96911 |
high | 7.8 | 0.0055 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component | |
CVE-2026-69673 |
high | 7.8 | 0.0051 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update allows an authorize | |
CVE-2026-83659 |
high | 7.8 | 0.0034 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows User Profile Service allow | |
CVE-2026-83704 |
high | 7.8 | 0.0048 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component | |
CVE-2026-83927 |
high | 7.8 | 0.0039 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Registry allows an authori | |
CVE-2026-85849 |
high | 7.8 | 0.0049 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service al | |
CVE-2026-88072 |
high | 7.8 | 0.0039 | 2026-10-13 | Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate pr | |
CVE-2026-88191 |
high | 7.8 | 0.0037 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component | |
CVE-2026-40931 |
high | 7.8 | 0.0026 | 2026-04-21 | Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, the patch fo | |
CVE-2026-44471 |
high | 7.8 | 0.0029 | 2026-05-13 | gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be const | |
CVE-2026-44274 |
high | 7.8 | 0.0017 | 2026-06-22 | Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Be | |
CVE-2026-11940 |
high | 7.8 | 0.0075 | 2026-06-23 | tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a | |
CVE-2026-41121 |
high | 7.8 | 0.0017 | 2026-07-01 | Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Befo | |
CVE-2026-13268 |
high | 7.8 | 0.0020 | 2026-07-29 | G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This v | |
CVE-2026-40717 |
high | 7.8 | 0.0016 | 2026-08-03 | Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link | |
CVE-2026-12410 |
high | 7.8 | 0.0017 | 2026-08-05 | Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows | |
CVE-2026-17171 |
high | 7.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary fi | |
CVE-2026-34242 |
high | 7.7 | 0.0046 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't | |
CVE-2026-35349 |
high | 7.7 | 0.0019 | 2026-04-22 | A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protect | |
CVE-2026-55607 |
high | 7.7 | 0.0069 | 2026-06-29 | Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling a | |
CVE-2026-15392 |
high | 7.7 | 0.0020 | 2026-07-14 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrust | |
CVE-2026-112344 |
high | 7.6 | 0.0030 | 2026-10-26 | Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers w | |
CVE-2026-62189 |
high | 7.6 | 0.0037 | 2026-07-13 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync featu | |
CVE-2026-41882 |
high | 7.5 | 0.0040 | 2026-04-30 | In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 readi | |
CVE-2026-115713 |
high | 7.5 | — | 2026-10-29 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise | |
CVE-2026-57991 |
high | 7.4 | 0.0104 | 2026-07-03 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) al | |
CVE-2026-33694 |
high | 7.4 | 0.0015 | 2026-04-23 | This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files | |
CVE-2026-45539 |
high | 7.4 | 0.0065 | 2026-05-15 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0. | |
CVE-2026-115908 |
high | 7.4 | 0.0043 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9 | |
CVE-2026-114096 |
high | 7.3 | 0.0015 | 2026-10-21 | Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(pa | |
CVE-2026-6064 |
high | 7.3 | 0.0012 | 2026-10-28 | Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and A | |
CVE-2026-50364 |
high | 7.3 | 0.0047 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Server Backup allows an au | |
CVE-2026-70190 |
high | 7.3 | 0.0049 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker | |
CVE-2026-15684 |
high | 7.3 | 0.0019 | 2026-07-13 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerabilit | |
CVE-2026-11837 |
high | 7.3 | 0.0016 | 2026-06-10 | A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The | 1 PoC |
CVE-2026-90464 |
high | 7.2 | 0.0036 | 2026-10-27 | An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic comma | |
CVE-2026-53795 |
high | 7.2 | 0.0040 | 2026-08-13 | rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write fil | |
CVE-2026-53799 |
high | 7.2 | 0.0012 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to ca | |
CVE-2026-115708 |
high | 7.2 | — | 2026-10-29 | Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise | |
CVE-2026-72694 |
high | 7.1 | 0.0014 | 2026-08-11 | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops priv | |
CVE-2024-14047 |
high | 7.1 | 0.0014 | 2026-09-01 | A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a dir |