Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-42812 |
critical | 9.4 | 0.0037 | 2026-05-04 | In Apache Iceberg, the table's metadata files are control files: they tell readers which data files | |
CVE-2026-61186 |
critical | 9.4 | 0.0041 | 2026-07-21 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2025-30054 |
critical | 9.3 | 0.0010 | 2026-10-23 | CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 me | |
CVE-2026-53486 |
critical | 9.1 | 0.0075 | 2026-07-14 | The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction | |
CVE-2026-61155 |
critical | 9.1 | 0.0049 | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (com | |
CVE-2026-58424 |
high | 8.9 | 0.0025 | 2026-07-03 | Permanent Fork PR Workflow Approval Gate Bypass | |
CVE-2026-1185 |
high | 8.8 | 0.0023 | 2026-05-12 | A configuration file on the local file system had improper input validation which could allow code e | |
CVE-2026-9085 |
high | 8.8 | 0.0014 | 2026-07-05 | Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBI | |
CVE-2026-91798 |
high | 8.8 | 0.0015 | 2026-09-23 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader du | |
CVE-2026-62195 |
high | 8.7 | 0.0040 | 2026-07-13 | OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP | |
CVE-2026-55441 |
high | 8.6 | 0.0018 | 2026-06-26 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feat | |
CVE-2024-32010 |
high | 8.5 | 0.0013 | 2025-11-11 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The af | |
CVE-2026-22676 |
high | 8.5 | 0.0010 | 2026-04-15 | Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows lo | |
CVE-2026-8069 |
high | 8.5 | 0.0012 | 2026-05-08 | PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability. | |
CVE-2026-9789 |
high | 8.5 | 0.0015 | 2026-05-28 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to | |
CVE-2026-12957 |
high | 8.5 | 0.0023 | 2026-06-23 | Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all support | |
CVE-2024-58383 |
high | 8.4 | 0.0015 | 2026-09-14 | Froxlor before 2.2.0 (affected up to and including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf | |
CVE-2026-41217 |
high | 8.3 | 0.0011 | 2026-05-13 | A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenti | |
CVE-2026-69108 |
high | 8.3 | 0.0017 | 2026-08-11 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affec | |
CVE-2026-49340 |
high | 8.1 | 0.0031 | 2026-06-19 | gonic is a music streaming server / free-software subsonic server API implementation. Prior to versi | |
CVE-2024-46062 |
high | 7.8 | 0.0020 | 2025-12-17 | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when | |
CVE-2026-92377 |
high | 7.8 | 0.0011 | 2026-10-27 | Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host | |
CVE-2026-63522 |
high | 7.8 | 0.0030 | 2026-08-11 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized att | |
CVE-2026-97792 |
high | 7.8 | 0.0032 | 2026-10-13 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth | |
CVE-2026-97800 |
high | 7.8 | 0.0030 | 2026-10-13 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authoriz | |
CVE-2026-21765 |
high | 7.8 | 0.0010 | 2026-04-02 | HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private | |
CVE-2026-8110 |
high | 7.8 | 0.0024 | 2026-05-12 | Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 all | |
CVE-2026-14478 |
high | 7.8 | 0.0015 | 2026-08-12 | A maliciously created executable, when executed on the victim's machine, may allow a local low-privi | |
CVE-2026-76495 |
high | 7.8 | 0.0014 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expresswa | |
CVE-2026-111184 |
high | 7.8 | 0.0014 | 2026-10-21 | NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This | |
CVE-2026-50057 |
high | 7.8 | 0.0027 | 2026-10-23 | A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allow | |
CVE-2026-93640 |
high | 7.8 | 0.0012 | 2026-10-23 | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration | |
CVE-2026-107042 |
high | 7.5 | — | 2026-10-29 | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized a | |
CVE-2026-107047 |
high | 7.5 | — | 2026-10-29 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrari | |
CVE-2026-107026 |
high | 7.5 | — | 2026-10-29 | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to | |
CVE-2026-22768 |
high | 7.3 | 0.0013 | 2026-04-01 | Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource | |
CVE-2026-41288 |
high | 7.3 | 0.0011 | 2026-05-06 | Incorrect permission assignment for a resource in the patch management component of the WatchGuard A | |
CVE-2026-0541 |
high | 7.3 | 0.0010 | 2026-05-12 | ACAP applications can gain elevated privileges due to improper input validation during the installat | |
CVE-2026-13079 |
high | 7.3 | 0.0014 | 2026-07-03 | A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows | |
CVE-2026-115253 |
high | 7.3 | 0.0013 | 2026-10-22 | An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a lo | |
CVE-2026-90464 |
high | 7.2 | 0.0036 | 2026-10-27 | An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic comma | |
CVE-2026-44878 |
high | 7.2 | 0.0060 | 2026-07-21 | A vulnerability in the web-based management interface of an ECOS device could allow a highly privile | |
CVE-2026-4757 |
high | 7.2 | 0.0057 | 2026-08-11 | A VAPIX API parameter had improper input validation which could allow code execution and potentially | |
CVE-2026-35341 |
high | 7.1 | 0.0016 | 2026-04-22 | A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions o | |
CVE-2026-40462 |
high | 7.1 | 0.0025 | 2026-05-13 | Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undiscl | |
CVE-2026-41959 |
high | 7.1 | 0.0020 | 2026-05-13 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network | |
CVE-2026-42937 |
high | 7.1 | 0.0020 | 2026-05-13 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and | |
CVE-2026-60659 |
high | 7.1 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The suppor | |
CVE-2026-45222 |
medium | 6.9 | 0.0015 | 2026-05-11 | Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directo | |
CVE-2026-47134 |
medium | 6.9 | 0.0015 | 2026-07-20 | ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. |