Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-16363 |
critical | 9.8 | 0.0064 | 2026-07-21 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox | |
CVE-2026-71479 |
critical | 9.1 | 0.0065 | 2026-08-17 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management sys | |
CVE-2026-76043 |
high | 8.8 | 0.0041 | 2026-08-18 | Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to ex | |
CVE-2026-20270 |
high | 8.6 | 0.0047 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So | |
CVE-2026-114117 |
high | 8.2 | 0.0029 | 2026-10-21 | Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(ms | |
CVE-2026-116541 |
high | 8.2 | 0.0049 | 2026-10-26 | Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write | |
CVE-2026-47247 |
high | 7.5 | 0.0048 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in lib | |
CVE-2026-20236 |
high | 7.5 | 0.0044 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope | |
CVE-2026-115786 |
medium | 6.5 | 0.0037 | 2026-10-23 | A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated | |
CVE-2026-10773 |
medium | 5.4 | 0.0027 | 2026-08-01 | The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a stat | |
CVE-2026-106438 |
medium | 5.1 | 0.0014 | 2026-10-08 | An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain ove |