Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-43907 |
high | 8.3 | 0.0037 | 2026-05-14 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format | |
CVE-2026-8548 |
high | 8.3 | 0.0021 | 2026-05-14 | Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who | |
CVE-2026-8569 |
high | 8.3 | 0.0025 | 2026-05-14 | Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attac | |
CVE-2026-12019 |
high | 8.3 | 0.0025 | 2026-06-11 | Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowe | |
CVE-2026-14400 |
high | 8.3 | 0.0024 | 2026-07-01 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who h | |
CVE-2026-62349 |
high | 8.3 | 0.0050 | 2026-07-15 | TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1. | |
CVE-2026-16413 |
high | 8.3 | 0.0027 | 2026-07-21 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who | |
CVE-2026-59250 |
high | 8.3 | 0.0078 | 2026-07-27 | Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticat | |
CVE-2026-21047 |
high | 8.3 | 0.0067 | 2026-07-28 | Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potenti | |
CVE-2026-58177 |
high | 8.3 | 0.0059 | 2026-07-29 | The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-f | |
CVE-2026-19148 |
high | 8.3 | 0.0030 | 2026-08-06 | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attack | |
CVE-2026-19173 |
high | 8.3 | 0.0034 | 2026-08-06 | Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who h | |
CVE-2026-53413 |
high | 8.3 | 0.0049 | 2026-08-11 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may a | |
CVE-2026-70457 |
high | 8.3 | 0.0038 | 2026-08-13 | rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value | |
CVE-2026-111280 |
high | 8.3 | 0.0051 | 2026-10-15 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() | |
CVE-2021-48018 |
high | 8.3 | 0.0039 | 2026-10-21 | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the sa | |
CVE-2026-115723 |
high | 8.3 | 0.0042 | 2026-10-23 | Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows | |
CVE-2026-70388 |
high | 8.3 | 0.0021 | 2026-10-26 | SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can | |
CVE-2026-57191 |
high | 8.2 | 0.0059 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-27890 |
high | 8.2 | 0.0046 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-59197 |
high | 8.2 | 0.0044 | 2026-07-14 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a n | |
CVE-2026-24253 |
high | 8.2 | 0.0064 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds writ | |
CVE-2026-116539 |
high | 8.2 | 0.0040 | 2026-10-26 | Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_wr | |
CVE-2026-105005 |
high | 8.1 | 0.0075 | 2026-10-13 | Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-108457 |
high | 8.1 | 0.0076 | 2026-10-13 | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a | |
CVE-2026-70197 |
high | 8.1 | 0.0079 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | |
CVE-2026-41907 |
high | 8.1 | 0.0035 | 2026-04-24 | uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept | |
CVE-2026-10678 |
high | 8.1 | 0.0039 | 2026-07-21 | The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes | |
CVE-2026-17544 |
high | 8.1 | 0.0042 | 2026-07-30 | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corrup | |
CVE-2023-22234 |
high | 7.8 | 0.0040 | 2023-02-17 | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerabi | |
CVE-2023-53676 |
high | 7.8 | 0.0032 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer | |
CVE-2023-53680 |
high | 7.8 | 0.0031 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC() wi | |
CVE-2026-46300 |
high | 7.8 | 0.1572 | 2026-05-23 | Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unin | KEV 15 PoC |
CVE-2024-14040 |
high | 7.8 | 0.0016 | 2026-07-26 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight t | |
CVE-2026-62871 |
high | 7.8 | 0.0047 | 2026-08-11 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | |
CVE-2026-70354 |
high | 7.8 | 0.0036 | 2026-08-11 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | |
CVE-2026-58087 |
high | 7.8 | 0.0016 | 2026-08-19 | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dro | |
CVE-2026-16513 |
high | 7.8 | 0.0016 | 2026-09-28 | The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/ | |
CVE-2026-18413 |
high | 7.8 | 0.0013 | 2026-09-28 | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small | |
CVE-2026-18414 |
high | 7.8 | 0.0013 | 2026-09-28 | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small | |
CVE-2026-96521 |
high | 7.8 | 0.0018 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary | |
CVE-2026-47486 |
high | 7.8 | 0.0015 | 2026-10-27 | NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-boun | |
CVE-2026-82961 |
high | 7.8 | 0.0013 | 2026-10-28 | The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied | |
CVE-2026-68806 |
high | 7.8 | 0.0047 | 2026-08-11 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locall | |
CVE-2026-70303 |
high | 7.8 | 0.0042 | 2026-10-13 | Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-83712 |
high | 7.8 | 0.0036 | 2026-10-13 | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. | |
CVE-2026-84016 |
high | 7.8 | 0.0031 | 2026-10-13 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges l | |
CVE-2022-47977 |
high | 7.8 | 0.0022 | 2023-02-14 | A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All version | |
CVE-2023-24979 |
high | 7.8 | 0.0023 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The | |
CVE-2023-24980 |
high | 7.8 | 0.0023 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The |