Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-42369 |
critical | 10.0 | 0.0054 | 2026-05-04 | GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and | |
CVE-2026-16367 |
critical | 10.0 | 0.0055 | 2026-07-21 | Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability wa | |
CVE-2026-44747 |
critical | 9.9 | 0.0056 | 2026-07-14 | SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in | |
CVE-2026-17006 |
critical | 9.8 | 0.0077 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17122 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17141 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-96639 |
critical | 9.8 | 0.0066 | 2026-10-21 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an Imag | |
CVE-2026-69705 |
critical | 9.8 | 0.0097 | 2026-10-13 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
CVE-2026-83910 |
critical | 9.8 | 0.0108 | 2026-10-13 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | |
CVE-2026-96219 |
critical | 9.8 | 0.0089 | 2026-10-13 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthor | |
CVE-2023-29531 |
critical | 9.8 | 0.0097 | 2023-06-19 | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory cor | |
CVE-2023-34416 |
critical | 9.8 | 0.0093 | 2023-06-19 | Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these | |
CVE-2024-21762 |
critical | 9.8 | 0.8459 | 2024-02-09 | Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated a | KEV |
CVE-2025-11709 |
critical | 9.8 | 0.0042 | 2025-10-14 | A compromised web process was able to trigger out of bounds reads and writes in a more privileged pr | |
CVE-2026-5734 |
critical | 9.8 | 0.0033 | 2026-04-07 | Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thun | |
CVE-2026-5735 |
critical | 9.8 | 0.0026 | 2026-04-07 | Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evi | |
CVE-2025-62818 |
critical | 9.8 | 0.0046 | 2026-04-07 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, | |
CVE-2026-5442 |
critical | 9.8 | 0.0060 | 2026-04-09 | A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded | |
CVE-2026-5443 |
critical | 9.8 | 0.0057 | 2026-04-09 | A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pix | |
CVE-2026-40393 |
critical | 9.8 | 0.0043 | 2026-04-12 | In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because | |
CVE-2026-25207 |
critical | 9.8 | 0.0019 | 2026-04-13 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue | |
CVE-2026-40492 |
critical | 9.8 | 0.0041 | 2026-04-18 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, | |
CVE-2026-40493 |
critical | 9.8 | 0.0037 | 2026-04-18 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, | |
CVE-2026-40494 |
critical | 9.8 | 0.0033 | 2026-04-18 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, | |
CVE-2026-41144 |
critical | 9.8 | 0.0043 | 2026-04-22 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde | |
CVE-2026-26354 |
critical | 9.8 | 0.0050 | 2026-04-22 | Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1 | |
CVE-2026-42370 |
critical | 9.8 | 0.0055 | 2026-05-04 | A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V | |
CVE-2026-8507 |
critical | 9.8 | 0.0065 | 2026-05-17 | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When pa | |
CVE-2026-10879 |
critical | 9.8 | 0.0049 | 2026-06-05 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more tha | |
CVE-2026-41157 |
critical | 9.8 | 0.0036 | 2026-06-12 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trig | |
CVE-2026-0126 |
critical | 9.8 | 0.0028 | 2026-06-16 | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead | |
CVE-2026-48773 |
critical | 9.8 | 0.0069 | 2026-06-19 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Versions 2.0.18 through 3.0.8 ha | |
CVE-2026-14241 |
critical | 9.8 | 0.0043 | 2026-06-30 | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corrupti | |
CVE-2026-14739 |
critical | 9.8 | 0.0041 | 2026-07-07 | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extre | |
CVE-2026-63886 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate C | |
CVE-2026-64608 |
critical | 9.8 | 0.0081 | 2026-07-21 | Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deseria | |
CVE-2026-59147 |
critical | 9.8 | 0.0055 | 2026-07-21 | Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an | |
CVE-2026-43748 |
critical | 9.8 | 0.0059 | 2026-07-27 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-43802 |
critical | 9.8 | 0.0060 | 2026-07-27 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-71254 |
critical | 9.8 | 0.0055 | 2026-08-05 | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_fil | |
CVE-2026-34265 |
critical | 9.8 | 0.0064 | 2026-08-11 | SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors i | |
CVE-2026-17218 |
critical | 9.8 | 0.0080 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-o | |
CVE-2026-17083 |
critical | 9.8 | 0.0080 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack- | |
CVE-2026-16840 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16845 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16862 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16864 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16894 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16913 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17152 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod |