Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (837)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-26332 |
critical | 10.0 | 0.0071 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError allows attack | |
CVE-2026-53405 |
critical | 9.8 | 0.0075 | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with a | |
CVE-2026-53421 |
critical | 9.8 | 0.0114 | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with | |
CVE-2026-63071 |
critical | 9.8 | 0.0075 | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with a | |
CVE-2026-114087 |
critical | 9.2 | 0.0051 | 2026-10-21 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosti | |
CVE-2026-40968 |
high | 8.8 | 0.0017 | 2026-04-28 | When an authenticated user is denied access to a gRPC method, their authenticated identity remains b | |
CVE-2026-62246 |
high | 8.5 | 0.0036 | 2026-07-30 | Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a Te | |
CVE-2026-65635 |
high | 8.3 | 0.0038 | 2026-07-30 | Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid m | |
CVE-2026-115517 |
medium | 6.4 | 0.0043 | 2026-10-22 | Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 a | |
CVE-2026-115416 |
medium | 6.3 | 0.0027 | 2026-10-22 | Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed | |
CVE-2026-15738 |
medium | 5.8 | 0.0065 | 2026-07-14 | Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Con | |
CVE-2026-41155 |
medium | 5.5 | 0.0011 | 2026-06-12 | An attacker could cooperatively pass data from one secure GPU process to another secure GPU process | |
CVE-2026-4325 |
medium | 5.3 | 0.0025 | 2026-04-02 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper ty | |
CVE-2025-21590 |
— | — | 0.0174 | — | Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerab | KEV |
CVE-2026-4282 |
— | — | 0.0043 | 2026-04-02 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper ty | |
CVE-2026-24781 |
— | — | 0.0119 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox br | |
CVE-2026-26956 |
— | — | 0.0109 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox e | |
CVE-2026-8401 |
— | — | 0.0031 | 2026-05-12 | Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-43997 |
— | — | 0.0098 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain the host Obj | |
CVE-2026-44005 |
— | — | 0.0083 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable pro | |
CVE-2026-44009 |
— | — | 0.0081 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11. | |
CVE-2026-12295 |
— | — | 0.0039 | 2026-06-16 | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefo | |
CVE-2026-12297 |
— | — | 0.0039 | 2026-06-16 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability |