Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-98096 |
high | 7.4 | 0.0050 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network heade | |
CVE-2026-4960 |
high | 7.4 | 0.0079 | 2026-03-27 | A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle o | |
CVE-2026-4961 |
high | 7.4 | 0.0079 | 2026-03-27 | A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the funct | |
CVE-2026-4974 |
high | 7.4 | 0.0064 | 2026-03-27 | A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTim | |
CVE-2026-4975 |
high | 7.4 | 0.0064 | 2026-03-27 | A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of th | |
CVE-2026-10665 |
high | 7.4 | 0.0060 | 2026-07-12 | In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c | |
CVE-2026-15545 |
high | 7.4 | 0.0073 | 2026-07-13 | A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is t | |
CVE-2025-40809 |
high | 7.3 | 0.0014 | 2025-10-14 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Ed | |
CVE-2025-40810 |
high | 7.3 | 0.0014 | 2025-10-14 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Ed | |
CVE-2026-43656 |
high | 7.3 | 0.0027 | 2026-05-11 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iO | |
CVE-2026-60063 |
high | 7.3 | 0.0015 | 2026-07-16 | An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger k | |
CVE-2026-61389 |
high | 7.3 | 0.0015 | 2026-07-16 | An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger k | |
CVE-2026-65705 |
high | 7.3 | 0.0019 | 2026-07-23 | FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill v | |
CVE-2026-93862 |
high | 7.2 | 0.0016 | 2026-10-27 | An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned | |
CVE-2026-0263 |
high | 7.2 | 0.0037 | 2026-05-13 | A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allow | |
CVE-2026-7829 |
high | 7.2 | 0.0085 | 2026-07-01 | UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/de | |
CVE-2026-18693 |
high | 7.2 | 0.0034 | 2026-08-11 | An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user wi | |
CVE-2026-92158 |
high | 7.2 | 0.0075 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde | |
CVE-2026-111730 |
high | 7.2 | — | 2026-10-29 | P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_ch | |
CVE-2026-18415 |
high | 7.1 | 0.0010 | 2026-09-28 | ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single | |
CVE-2026-103593 |
high | 7.1 | 0.0010 | 2026-10-27 | A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adja | |
CVE-2026-57188 |
high | 7.1 | 0.0052 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-5444 |
high | 7.1 | 0.0016 | 2026-04-09 | A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a | |
CVE-2026-44215 |
high | 7.1 | 0.0028 | 2026-05-12 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte heap out-of | |
CVE-2026-44637 |
high | 7.1 | 0.0016 | 2026-05-14 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a | |
CVE-2026-10641 |
high | 7.1 | 0.0028 | 2026-06-17 | Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/cl | |
CVE-2026-44663 |
high | 7.1 | 0.0021 | 2026-06-18 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in t | |
CVE-2026-49295 |
high | 7.1 | 0.0034 | 2026-06-19 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a craft | |
CVE-2026-10658 |
high | 7.1 | 0.0028 | 2026-06-23 | bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timest | |
CVE-2026-47150 |
high | 7.1 | 0.0038 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds | |
CVE-2026-47151 |
high | 7.1 | 0.0038 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds w | |
CVE-2026-49839 |
high | 7.1 | 0.0016 | 2026-06-25 | jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-str | |
CVE-2026-50144 |
high | 7.1 | 0.0016 | 2026-07-15 | ncnn is a high-performance neural network inference framework optimized for the mobile platform. In | |
CVE-2026-35226 |
high | 7.1 | 0.0028 | 2026-07-29 | An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated at | |
CVE-2026-54715 |
high | 7.1 | 0.0044 | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix syst | |
CVE-2026-18888 |
high | 7.1 | 0.0042 | 2026-08-12 | The MongoDB BI Connector ODBC Driver converts floating point column values into text without checkin | |
CVE-2026-53792 |
high | 7.1 | 0.0031 | 2026-08-13 | rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching lo | |
CVE-2026-110839 |
high | 7.1 | 0.0027 | 2026-10-14 | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-boun | |
CVE-2026-82947 |
high | 7.1 | 0.0017 | 2026-10-26 | SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicio | |
CVE-2026-113912 |
high | 7.1 | 0.0022 | 2026-10-26 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iO | |
CVE-2026-85826 |
high | 7.0 | 0.0025 | 2026-10-13 | Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges l | |
CVE-2026-8085 |
high | 7.0 | 0.0027 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the mod | |
CVE-2026-8312 |
high | 7.0 | 0.0027 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the exp | |
CVE-2026-8313 |
high | 7.0 | 0.0027 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the lin | |
CVE-2026-8314 |
high | 7.0 | 0.0027 | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the sim | |
CVE-2026-63387 |
high | 7.0 | 0.0042 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-o | |
CVE-2026-116842 |
medium | 6.9 | 0.0013 | 2026-10-27 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq | |
CVE-2026-58458 |
medium | 6.9 | 0.0025 | 2026-10-28 | Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnera | |
CVE-2026-60094 |
medium | 6.9 | 0.0064 | 2026-07-09 | Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that all | |
CVE-2026-57021 |
medium | 6.9 | 0.0047 | 2026-07-09 | An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS o |