Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70461 |
high | 8.8 | 0.0057 | 2026-08-13 | rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauth | |
CVE-2026-16841 |
high | 8.8 | 0.0041 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16847 |
high | 8.8 | 0.0041 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16901 |
high | 8.8 | 0.0042 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-16934 |
high | 8.8 | 0.0015 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg | |
CVE-2026-16936 |
high | 8.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-17168 |
high | 8.8 | 0.0063 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute | |
CVE-2026-17422 |
high | 8.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-79982 |
high | 8.8 | 0.0023 | 2026-10-23 | The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_h | |
CVE-2026-82944 |
high | 8.8 | 0.0021 | 2026-10-26 | SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a mali | |
CVE-2026-112397 |
high | 8.7 | 0.0057 | 2026-10-19 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access | |
CVE-2026-33317 |
high | 8.7 | 0.0019 | 2026-04-24 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-8053 |
high | 8.7 | 0.0066 | 2026-05-13 | An issue in MongoDB Server's time-series collection implementation allows an authenticated user with | |
CVE-2026-56340 |
high | 8.7 | 0.0064 | 2026-06-20 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings p | |
CVE-2026-7838 |
high | 8.7 | 0.0187 | 2026-07-01 | UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in th | |
CVE-2026-16095 |
high | 8.7 | 0.0073 | 2026-07-18 | A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the f | |
CVE-2026-64835 |
high | 8.7 | 0.0050 | 2026-07-22 | FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX au | |
CVE-2026-116543 |
high | 8.7 | 0.0039 | 2026-10-26 | Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() t | |
CVE-2026-90442 |
high | 8.6 | 0.0021 | 2026-10-27 | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated | |
CVE-2026-34588 |
high | 8.6 | 0.0048 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-40489 |
high | 8.6 | 0.0015 | 2026-04-18 | editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig pars | |
CVE-2026-6691 |
high | 8.6 | 0.0013 | 2026-05-06 | The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonic | |
CVE-2026-13050 |
high | 8.6 | 0.0064 | 2026-07-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authe | |
CVE-2026-13053 |
high | 8.6 | 0.0064 | 2026-07-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated pr | |
CVE-2026-13383 |
high | 8.6 | 0.0072 | 2026-07-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authe | |
CVE-2026-13384 |
high | 8.6 | 0.0072 | 2026-07-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authen | |
CVE-2026-10848 |
high | 8.6 | 0.0038 | 2026-08-02 | The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys | |
CVE-2026-71255 |
high | 8.6 | 0.0039 | 2026-08-05 | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_devic | |
CVE-2026-76490 |
high | 8.6 | 0.0044 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expresswa | |
CVE-2026-115504 |
high | 8.5 | 0.0013 | 2026-10-22 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that t | |
CVE-2026-118752 |
high | 8.5 | 0.0014 | 2026-10-28 | FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE | |
CVE-2026-118753 |
high | 8.5 | 0.0014 | 2026-10-28 | FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.c | |
CVE-2026-65703 |
high | 8.5 | 0.0029 | 2026-07-23 | FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video dec | |
CVE-2026-65706 |
high | 8.5 | 0.0019 | 2026-07-23 | FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect vi | |
CVE-2026-77118 |
high | 8.4 | 0.0017 | 2026-08-20 | A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() | |
CVE-2026-34544 |
high | 8.4 | 0.0025 | 2026-04-01 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-34589 |
high | 8.4 | 0.0042 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-43903 |
high | 8.4 | 0.0013 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-43904 |
high | 8.4 | 0.0017 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-42953 |
high | 8.4 | 0.0018 | 2026-07-07 | The application contains an out-of-bounds write vulnerability that can be exploited by an attacker t | |
CVE-2026-12927 |
high | 8.4 | 0.0018 | 2026-07-29 | CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk a | |
CVE-2026-71969 |
high | 8.4 | 0.0018 | 2026-08-10 | OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the | |
CVE-2026-8718 |
high | 8.4 | 0.0017 | 2026-08-10 | tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles g | |
CVE-2026-63388 |
high | 8.4 | 0.0014 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out- | |
CVE-2020-37286 |
high | 8.3 | 0.0028 | 2026-10-21 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect st | |
CVE-2021-48020 |
high | 8.3 | 0.0028 | 2026-10-21 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect st | |
CVE-2026-116741 |
high | 8.3 | 0.0041 | 2026-10-26 | Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whol | |
CVE-2026-6314 |
high | 8.3 | 0.0027 | 2026-04-15 | Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who ha | |
CVE-2026-7923 |
high | 8.3 | 0.0022 | 2026-05-06 | Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who ha | |
CVE-2026-43907 |
high | 8.3 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format |