Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-0297 |
medium | 5.2 | 0.0060 | 2026-08-13 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a m | |
CVE-2026-55737 |
medium | 5.1 | 0.0029 | 2026-07-27 | Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows | |
CVE-2026-10664 |
medium | 5.0 | 0.0022 | 2026-07-12 | The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drive | |
CVE-2026-43767 |
medium | 5.0 | 0.0015 | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, | |
CVE-2026-12519 |
medium | 5.0 | 0.0024 | 2026-08-17 | The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() | |
CVE-2026-116502 |
medium | 4.8 | 0.0015 | 2026-10-26 | A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function Q | |
CVE-2026-103392 |
medium | 4.8 | 0.0022 | 2026-10-28 | An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart | |
CVE-2026-2674 |
medium | 4.8 | 0.0018 | 2026-06-17 | Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persi | |
CVE-2026-116096 |
medium | 4.8 | 0.0012 | 2026-10-25 | A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_po | |
CVE-2026-20471 |
medium | 4.6 | 0.0023 | 2026-08-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to loc | |
CVE-2026-20472 |
medium | 4.4 | 0.0014 | 2026-08-03 | In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to lo | |
CVE-2026-20493 |
medium | 4.4 | 0.0014 | 2026-08-03 | In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to l | |
CVE-2026-16886 |
medium | 4.3 | 0.0028 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-16825 |
medium | 4.2 | 0.0033 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain | |
CVE-2026-118673 |
medium | 4.1 | — | 2026-10-29 | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe | |
CVE-2026-41990 |
medium | 4.0 | 0.0023 | 2026-04-23 | Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check b | |
CVE-2026-54696 |
low | 3.7 | 0.0041 | 2026-06-30 | Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap bu | |
CVE-2026-79978 |
low | 3.6 | 0.0009 | 2026-10-23 | The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl3 | |
CVE-2026-10644 |
low | 3.1 | 0.0022 | 2026-06-28 | The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH S | |
CVE-2026-39199 |
low | 2.9 | 0.0013 | 2026-06-17 | snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. | |
CVE-2026-110734 |
low | 2.5 | 0.0016 | 2026-10-14 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder ( | |
CVE-2026-65609 |
low | 2.4 | 0.0015 | 2026-08-19 | nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-control | |
CVE-2026-57189 |
low | 2.3 | 0.0074 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, a | |
CVE-2026-57199 |
low | 2.3 | 0.0048 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-116099 |
low | 2.1 | 0.0038 | 2026-10-26 | A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This | |
CVE-2026-5317 |
low | 2.1 | 0.0043 | 2026-04-02 | A security flaw has been discovered in Nothings stb up to 1.22. This affects the function start_deco | |
CVE-2026-15105 |
low | 2.1 | 0.0038 | 2026-07-08 | A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::Perfor | |
CVE-2026-16225 |
low | 2.1 | 0.0040 | 2026-07-19 | A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the f | |
CVE-2026-107590 |
low | 1.9 | 0.0012 | 2026-10-27 | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibi | |
CVE-2026-7582 |
low | 1.9 | 0.0011 | 2026-05-01 | A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulner | |
CVE-2026-15997 |
low | 1.7 | 0.0014 | 2026-07-16 | Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM al | |
CVE-2026-115393 |
low | 1.0 | 0.0009 | 2026-10-22 | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 conta | |
CVE-2018-8174 |
— | — | 0.8824 | — | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in | KEV |
CVE-2020-1054 |
— | — | 0.5388 | — | Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver f | KEV |
CVE-2021-1732 |
— | — | 0.7838 | — | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | KEV |
CVE-2021-22555 |
— | — | 0.7868 | — | Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain | KEV |
CVE-2021-34448 |
— | — | 0.4006 | — | Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corr | KEV |
CVE-2022-21882 |
— | — | 0.5920 | — | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | KEV |
CVE-2021-4034 |
— | — | 0.9492 | — | The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows | KEV |
CVE-2022-0995 |
— | — | 0.0886 | — | Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to | KEV |
CVE-2022-2294 |
— | — | 0.7083 | — | WebRTC, an open-source project providing web browsers with real-time communication, contains a heap | KEV |
CVE-2022-37969 |
— | — | 0.2848 | — | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that al | KEV |
CVE-2022-41073 |
— | — | 0.0236 | — | Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gai | KEV |
CVE-2022-41125 |
— | — | 0.0305 | — | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified | KEV |
CVE-2022-41128 |
— | — | 0.2462 | — | Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which all | KEV |
CVE-2023-24560 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24566 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-23376 |
— | — | 0.1085 | — | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that al | KEV |
CVE-2023-27997 |
— | — | 0.8569 | — | Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can | KEV |
CVE-2023-4911 |
— | — | 0.6377 | — | GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GL | KEV |