Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-18842 |
high | 7.8 | 0.0015 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg | |
CVE-2026-19783 |
high | 7.8 | 0.0016 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory co | |
CVE-2026-95637 |
high | 7.8 | 0.0018 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary | |
CVE-2026-95641 |
high | 7.8 | 0.0018 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary | |
CVE-2026-107895 |
high | 7.8 | 0.0013 | 2026-10-26 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a c | |
CVE-2026-91794 |
high | 7.8 | 0.0022 | 2026-09-23 | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader | |
CVE-2026-96778 |
high | 7.7 | 0.0045 | 2026-10-21 | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/J | |
CVE-2026-57197 |
high | 7.7 | 0.0053 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-8247 |
high | 7.7 | 0.0038 | 2026-07-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker | |
CVE-2026-66041 |
high | 7.7 | 0.0049 | 2026-07-24 | FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability | |
CVE-2026-86377 |
high | 7.6 | 0.0030 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-7831 |
high | 7.6 | 0.0074 | 2026-07-01 | UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit m | |
CVE-2026-16907 |
high | 7.6 | 0.0057 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code d | |
CVE-2023-52356 |
high | 7.5 | 0.0251 | 2024-01-25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff f | |
CVE-2026-16706 |
high | 7.5 | 0.0055 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-17120 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-106117 |
high | 7.5 | 0.0039 | 2026-10-06 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group | |
CVE-2026-70058 |
high | 7.5 | 0.0133 | 2026-10-13 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a ne | |
CVE-2026-57201 |
high | 7.5 | 0.0070 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-47235 |
high | 7.5 | 0.0015 | 2026-10-28 | SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release- | |
CVE-2026-96233 |
high | 7.5 | 0.0099 | 2026-10-13 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | |
CVE-2023-2911 |
high | 7.5 | 0.0243 | 2023-06-21 | If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer- | |
CVE-2022-31810 |
high | 7.5 | 0.0088 | 2023-07-11 | A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server | |
CVE-2023-4050 |
high | 7.5 | 0.1258 | 2023-08-01 | In some cases, an untrusted input stream was copied to a stack buffer without checking its size. Thi | |
CVE-2024-26010 |
high | 7.5 | 0.0079 | 2024-06-11 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 t | |
CVE-2026-6507 |
high | 7.5 | 0.0048 | 2026-04-17 | A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by | |
CVE-2026-12310 |
high | 7.5 | 0.0025 | 2026-06-16 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR | |
CVE-2026-12314 |
high | 7.5 | 0.0025 | 2026-06-16 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR | |
CVE-2026-12844 |
high | 7.5 | 0.0066 | 2026-06-25 | List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise functi | |
CVE-2026-57876 |
high | 7.5 | 0.0055 | 2026-06-26 | An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and | |
CVE-2026-46604 |
high | 7.5 | 0.0061 | 2026-06-26 | The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset. | |
CVE-2026-54592 |
high | 7.5 | 0.0033 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-20458 |
high | 7.5 | 0.0033 | 2026-07-01 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to re | |
CVE-2026-55687 |
high | 7.5 | 0.0070 | 2026-07-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Versions 6.0.1, 5.5.4, 5.4. | |
CVE-2026-59199 |
high | 7.5 | 0.0039 | 2026-07-14 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger | |
CVE-2026-59205 |
high | 7.5 | 0.0039 | 2026-07-14 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, i | |
CVE-2026-44436 |
high | 7.5 | 0.0049 | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server | |
CVE-2026-40691 |
high | 7.5 | 0.0029 | 2026-07-22 | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine | |
CVE-2026-15057 |
high | 7.5 | 0.0046 | 2026-07-28 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of se | |
CVE-2026-10849 |
high | 7.5 | 0.0051 | 2026-08-03 | The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response | |
CVE-2026-16958 |
high | 7.5 | 0.0063 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-17425 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-18828 |
high | 7.5 | 0.0056 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-106110 |
high | 7.5 | 0.0039 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocate | |
CVE-2026-106112 |
high | 7.5 | 0.0039 | 2026-10-06 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than | |
CVE-2026-106113 |
high | 7.5 | 0.0039 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit fl | |
CVE-2026-106115 |
high | 7.5 | 0.0039 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocate | |
CVE-2026-8822 |
high | 7.5 | — | 2026-10-29 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (vers | |
CVE-2026-8824 |
high | 7.5 | — | 2026-10-29 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionalit | |
CVE-2026-58088 |
high | 7.4 | 0.0010 | 2026-08-19 | The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the cor |