Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-110875 |
medium | 6.9 | 0.0014 | 2026-10-15 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that | |
CVE-2026-111154 |
medium | 6.9 | 0.0013 | 2026-10-15 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader | |
CVE-2026-112059 |
medium | 6.9 | 0.0018 | 2026-10-18 | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader ca | |
CVE-2026-40003 |
medium | 6.8 | 0.0030 | 2026-05-07 | ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attacke | |
CVE-2026-21018 |
medium | 6.8 | 0.0015 | 2026-05-13 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers | |
CVE-2026-41970 |
medium | 6.8 | 0.0013 | 2026-05-15 | Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploita | |
CVE-2026-9105 |
medium | 6.8 | 0.0112 | 2026-06-29 | An authenticated stack-based buffer overflow vulnerability exists in the web management interface of | |
CVE-2026-73066 |
medium | 6.8 | 0.0013 | 2026-08-11 | Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component | |
CVE-2026-109576 |
medium | 6.8 | 0.0012 | 2026-10-20 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iteratin | |
CVE-2026-41989 |
medium | 6.7 | 0.0018 | 2026-04-23 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via craf | |
CVE-2026-40953 |
medium | 6.7 | 0.0010 | 2026-07-15 | CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior | |
CVE-2026-16914 |
medium | 6.7 | 0.0017 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-16951 |
medium | 6.7 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute | |
CVE-2026-112415 |
medium | 6.5 | 0.0055 | 2026-10-26 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7 | |
CVE-2026-112544 |
medium | 6.5 | 0.0038 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac | |
CVE-2026-112614 |
medium | 6.5 | 0.0050 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-112633 |
medium | 6.5 | 0.0055 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-112646 |
medium | 6.5 | 0.0055 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-113939 |
medium | 6.5 | 0.0044 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac | |
CVE-2026-113943 |
medium | 6.5 | 0.0044 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac | |
CVE-2026-84496 |
medium | 6.5 | 0.0046 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac | |
CVE-2026-86971 |
medium | 6.5 | 0.0058 | 2026-10-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-82962 |
medium | 6.5 | 0.0026 | 2026-10-28 | ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place | |
CVE-2023-1945 |
medium | 6.5 | 0.0064 | 2023-06-02 | Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potent | |
CVE-2026-20097 |
medium | 6.5 | 0.0041 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem | |
CVE-2026-28918 |
medium | 6.5 | 0.0049 | 2026-05-11 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iO | |
CVE-2026-28956 |
medium | 6.5 | 0.0052 | 2026-05-11 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-28972 |
medium | 6.5 | 0.0138 | 2026-05-11 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iO | |
CVE-2026-8669 |
medium | 6.5 | 0.0032 | 2026-05-15 | Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame | |
CVE-2026-13873 |
medium | 6.5 | 0.0029 | 2026-06-30 | Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to ob | |
CVE-2026-20464 |
medium | 6.5 | 0.0050 | 2026-08-03 | In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead | |
CVE-2026-17195 |
medium | 6.5 | 0.0013 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-82945 |
medium | 6.5 | 0.0017 | 2026-10-26 | SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a maliciou | |
CVE-2026-41257 |
medium | 6.4 | 0.0014 | 2026-05-11 | jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks it | |
CVE-2026-10660 |
medium | 6.4 | 0.0025 | 2026-07-11 | The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant. | |
CVE-2026-54900 |
medium | 6.3 | 0.0052 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-12235 |
medium | 6.3 | 0.0014 | 2026-08-12 | The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when link | |
CVE-2026-78119 |
medium | 6.3 | 0.0014 | 2026-10-21 | The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (driver | |
CVE-2026-43666 |
medium | 6.2 | 0.0015 | 2026-05-11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-35195 |
medium | 6.1 | 0.0022 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's imple | |
CVE-2026-7426 |
medium | 6.1 | 0.0025 | 2026-04-29 | Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRT | |
CVE-2026-1681 |
medium | 6.1 | 0.0014 | 2026-05-12 | Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address causes the netw | |
CVE-2026-58304 |
medium | 6.1 | 0.0016 | 2026-07-09 | Out-of-bounds read, Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflo | |
CVE-2026-20466 |
medium | 6.1 | 0.0017 | 2026-08-03 | In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could l | |
CVE-2026-57192 |
medium | 6.0 | 0.0065 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-56114 |
medium | 6.0 | 0.0027 | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulner | |
CVE-2026-20468 |
medium | 6.0 | 0.0016 | 2026-08-03 | In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to | |
CVE-2026-20475 |
medium | 6.0 | 0.0017 | 2026-08-03 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead t | |
CVE-2026-20477 |
medium | 6.0 | 0.0017 | 2026-08-03 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead t | |
CVE-2026-20481 |
medium | 6.0 | 0.0017 | 2026-08-03 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead |