Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-17157 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17436 |
critical | 9.8 | 0.0092 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-18832 |
critical | 9.8 | 0.0092 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-19437 |
critical | 9.8 | 0.0067 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2025-70290 |
critical | 9.8 | 0.0067 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS | |
CVE-2026-118342 |
critical | 9.6 | 0.0027 | 2026-10-27 | Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to | |
CVE-2026-14152 |
critical | 9.6 | 0.0024 | 2026-06-30 | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14392 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to pot | |
CVE-2026-14397 |
critical | 9.6 | 0.0024 | 2026-07-01 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacke | |
CVE-2026-14420 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-16419 |
critical | 9.6 | 0.0026 | 2026-07-21 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a | |
CVE-2026-17675 |
critical | 9.6 | 0.0043 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who h | |
CVE-2026-17691 |
critical | 9.6 | 0.0048 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17721 |
critical | 9.6 | 0.0044 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to po | |
CVE-2026-17727 |
critical | 9.6 | 0.0034 | 2026-07-30 | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-19157 |
critical | 9.6 | 0.0038 | 2026-08-06 | Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote at | |
CVE-2026-16903 |
critical | 9.6 | 0.0042 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-113300 |
critical | 9.6 | 0.0050 | 2026-10-20 | Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to po | |
CVE-2026-97631 |
critical | 9.5 | 0.0063 | 2026-10-22 | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer O | |
CVE-2026-103594 |
critical | 9.5 | 0.0043 | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allo | |
CVE-2026-54210 |
critical | 9.5 | 0.0066 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities | |
CVE-2026-54211 |
critical | 9.5 | 0.0064 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulne | |
CVE-2026-54212 |
critical | 9.5 | 0.0066 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable t | |
CVE-2026-86577 |
critical | 9.4 | 0.0046 | 2026-10-27 | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - | |
CVE-2018-25254 |
critical | 9.3 | 0.0091 | 2026-04-04 | NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows | |
CVE-2026-0300 |
critical | 9.3 | 0.4171 | 2026-05-06 | Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authenticatio | KEV |
CVE-2026-56786 |
critical | 9.3 | 0.0071 | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that | |
CVE-2026-7840 |
critical | 9.3 | 0.0263 | 2026-07-01 | UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administrat | |
CVE-2026-50161 |
critical | 9.3 | 0.0072 | 2026-08-18 | libre is a generic library for real-time communications with asynchronous input and output support. | |
CVE-2026-111732 |
critical | 9.3 | — | 2026-10-29 | P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from | |
CVE-2026-112398 |
critical | 9.2 | 0.0070 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write d | |
CVE-2026-111497 |
critical | 9.2 | 0.8264 | 2026-10-22 | Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated | KEV |
CVE-2026-112709 |
critical | 9.2 | 0.0042 | 2026-10-27 | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attac | |
CVE-2026-93857 |
critical | 9.2 | 0.0047 | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthentica | |
CVE-2026-93866 |
critical | 9.2 | 0.0045 | 2026-10-27 | An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware O | |
CVE-2026-118375 |
critical | 9.2 | 0.0037 | 2026-10-28 | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA tra | |
CVE-2026-43629 |
critical | 9.2 | 0.0070 | 2026-08-06 | llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache st | |
CVE-2026-118769 |
critical | 9.2 | — | 2026-10-29 | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_c | |
CVE-2026-17003 |
critical | 9.1 | 0.0044 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confid | |
CVE-2026-6100 |
critical | 9.1 | 0.0058 | 2026-04-13 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.G | |
CVE-2026-71263 |
critical | 9.1 | 0.0050 | 2026-08-05 | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP | |
CVE-2026-34971 |
critical | 9.0 | 0.0032 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's | |
CVE-2026-34987 |
critical | 9.0 | 0.0028 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime wi | |
CVE-2026-7372 |
critical | 9.0 | 0.0047 | 2026-05-04 | A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V | |
CVE-2026-20043 |
critical | 9.0 | 0.0036 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope | |
CVE-2026-58592 |
high | 8.9 | 0.0055 | 2026-07-01 | Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly E | |
CVE-2026-12553 |
high | 8.9 | 0.0043 | 2026-08-17 | HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticat | |
CVE-2026-63923 |
high | 8.8 | 0.0017 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pci | |
CVE-2026-16814 |
high | 8.8 | 0.0041 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16996 |
high | 8.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code |