Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (528)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-20485 |
medium | 6.0 | 0.0016 | 2026-08-03 | In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to l | |
CVE-2026-20497 |
medium | 6.0 | 0.0017 | 2026-08-03 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead | |
CVE-2026-19642 |
medium | 6.0 | 0.0050 | 2026-08-12 | An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow | |
CVE-2026-116590 |
medium | 5.9 | 0.0041 | 2026-10-26 | snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Pr | |
CVE-2026-57194 |
medium | 5.9 | 0.0044 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-34380 |
medium | 5.9 | 0.0026 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-114458 |
medium | 5.9 | 0.0031 | 2026-10-22 | A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) | |
CVE-2026-46690 |
medium | 5.8 | 0.0013 | 2026-06-12 | unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sende | |
CVE-2026-14063 |
medium | 5.7 | 0.0014 | 2026-06-30 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to | |
CVE-2026-15534 |
medium | 5.7 | 0.0016 | 2026-08-09 | Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matc | |
CVE-2026-98142 |
medium | 5.5 | 0.0011 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 | |
CVE-2025-60494 |
medium | 5.5 | 0.0020 | 2026-10-20 | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GP | |
CVE-2026-34863 |
medium | 5.5 | 0.0008 | 2026-04-13 | Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulner | |
CVE-2026-40916 |
medium | 5.5 | 0.0021 | 2026-04-15 | A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decod | |
CVE-2026-40919 |
medium | 5.5 | 0.0033 | 2026-04-15 | A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmworks` plug | |
CVE-2026-13592 |
medium | 5.5 | 0.0064 | 2026-06-29 | A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. A | |
CVE-2026-40257 |
medium | 5.5 | 0.0015 | 2026-07-06 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-17572 |
medium | 5.5 | 0.0014 | 2026-07-27 | Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all | |
CVE-2026-43774 |
medium | 5.5 | 0.0016 | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequ | |
CVE-2026-20476 |
medium | 5.5 | 0.0015 | 2026-08-03 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to lo | |
CVE-2026-20478 |
medium | 5.5 | 0.0014 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead | |
CVE-2026-20491 |
medium | 5.5 | 0.0015 | 2026-08-03 | In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to | |
CVE-2026-19696 |
medium | 5.5 | 0.0012 | 2026-08-13 | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of ser | |
CVE-2026-16855 |
medium | 5.5 | 0.0013 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-86981 |
medium | 5.5 | 0.0013 | 2026-10-20 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac | |
CVE-2026-118435 |
medium | 5.4 | 0.0021 | 2026-10-28 | Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation. | |
CVE-2026-7950 |
medium | 5.4 | 0.0017 | 2026-05-06 | Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacke | |
CVE-2026-28819 |
medium | 5.4 | 0.0650 | 2026-05-11 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS | |
CVE-2026-6039 |
medium | 5.4 | 0.0020 | 2026-06-15 | LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow exist | |
CVE-2026-6040 |
medium | 5.4 | 0.0016 | 2026-06-15 | A heap use-after-free existed when importing the blank-width characters of an ODF number format. A p | |
CVE-2026-6045 |
medium | 5.4 | 0.0021 | 2026-06-15 | LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow exi | |
CVE-2026-6047 |
medium | 5.4 | 0.0015 | 2026-06-15 | LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when rep | |
CVE-2026-8356 |
medium | 5.4 | 0.0015 | 2026-06-15 | LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existe | |
CVE-2026-8357 |
medium | 5.4 | 0.0022 | 2026-06-15 | LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed w | |
CVE-2026-8358 |
medium | 5.4 | 0.0023 | 2026-06-15 | LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow exis | |
CVE-2026-44254 |
medium | 5.3 | 0.0050 | 2026-08-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1 | |
CVE-2026-103391 |
medium | 5.3 | 0.0021 | 2026-10-28 | An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Sess | |
CVE-2026-8454 |
medium | 5.3 | 0.0019 | 2026-05-15 | Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted | |
CVE-2026-20461 |
medium | 5.3 | 0.0028 | 2026-07-01 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to | |
CVE-2026-21368 |
medium | 5.3 | 0.0008 | 2026-07-06 | Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during va | |
CVE-2026-21369 |
medium | 5.3 | 0.0008 | 2026-07-06 | Memory Corruption when handling flash commands due to outdated LED count values being used after use | |
CVE-2026-21370 |
medium | 5.3 | 0.0008 | 2026-07-06 | Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed va | |
CVE-2026-21384 |
medium | 5.3 | 0.0008 | 2026-07-06 | Memory Corruption when updating prepared commands with invalid port indices based on user space inpu | |
CVE-2026-17264 |
medium | 5.3 | 0.0048 | 2026-08-07 | Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-co | |
CVE-2026-62291 |
medium | 5.3 | 0.0019 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image s | |
CVE-2026-106564 |
medium | 5.3 | 0.0037 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-103634 |
medium | 5.3 | 0.0049 | 2026-10-22 | Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (rep | |
CVE-2026-93011 |
medium | 5.3 | — | 2026-10-29 | A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC vali | |
CVE-2026-0250 |
medium | 5.2 | 0.0039 | 2026-05-13 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a m | |
CVE-2026-12052 |
medium | 5.2 | 0.0027 | 2026-08-11 | The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next |