Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-118769 |
critical | 9.2 | — | 2026-10-29 | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_c | |
CVE-2026-26178 |
high | 8.8 | 0.0042 | 2026-04-14 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized att | |
CVE-2026-55768 |
high | 8.7 | 0.0047 | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix syst | |
CVE-2026-4931 |
high | 8.6 | 0.0026 | 2026-04-07 | Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt posit | |
CVE-2026-63926 |
high | 8.4 | 0.0019 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment | |
CVE-2026-50402 |
high | 7.8 | 0.0033 | 2026-07-14 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate | 1 PoC |
CVE-2026-55123 |
high | 7.8 | 0.0047 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute | |
CVE-2026-83872 |
high | 7.8 | 0.0035 | 2026-10-13 | Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevat | |
CVE-2026-98143 |
high | 7.8 | 0.0011 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U | |
CVE-2026-24174 |
high | 7.5 | 0.0052 | 2026-04-07 | NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash | |
CVE-2026-114654 |
medium | 6.9 | 0.0035 | 2026-10-22 | A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-o | |
CVE-2026-12670 |
medium | 6.5 | 0.0021 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafte | |
CVE-2026-114118 |
medium | 6.3 | 0.0020 | 2026-10-21 | Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint25 | |
CVE-2026-75145 |
medium | 5.8 | 0.0016 | 2026-08-19 | FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packe | |
CVE-2026-98095 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_h | |
CVE-2026-53923 |
medium | 5.3 | 0.0048 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0 | |
CVE-2026-21069 |
medium | 5.1 | 0.0015 | 2026-08-10 | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Releas | |
CVE-2026-34945 |
low | 2.3 | 0.0032 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's |