Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-96924 |
critical | 9.8 | 0.0101 | 2026-10-13 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a | |
CVE-2026-70300 |
critical | 9.8 | 0.0113 | 2026-10-13 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co | |
CVE-2026-63924 |
critical | 9.8 | 0.0071 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh point | |
CVE-2026-70068 |
high | 8.8 | 0.0093 | 2026-10-13 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attac | |
CVE-2026-70275 |
high | 8.8 | 0.0093 | 2026-10-13 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute co | |
CVE-2026-50382 |
high | 8.8 | 0.0033 | 2026-07-14 | Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code local | |
CVE-2026-88112 |
high | 8.8 | 0.0070 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n | |
CVE-2026-88114 |
high | 8.8 | 0.0070 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n | |
CVE-2026-88116 |
high | 8.8 | 0.0072 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n | |
CVE-2026-88219 |
high | 8.8 | 0.0085 | 2026-10-13 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a | |
CVE-2026-70167 |
high | 8.8 | 0.0098 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized att | |
CVE-2026-85903 |
high | 8.8 | 0.0070 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n | |
CVE-2026-9771 |
high | 8.8 | 0.0014 | 2026-08-17 | The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On bu | |
CVE-2026-19442 |
high | 8.8 | 0.0016 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtua | |
CVE-2026-40367 |
high | 8.4 | 0.0045 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an una | |
CVE-2026-58596 |
high | 8.3 | 0.0061 | 2026-07-12 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to | |
CVE-2026-70111 |
high | 8.1 | 0.0084 | 2026-10-13 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege | |
CVE-2026-70172 |
high | 7.8 | 0.0038 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo | |
CVE-2026-83826 |
high | 7.8 | 0.0035 | 2026-10-13 | Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate pr | |
CVE-2026-64910 |
high | 7.8 | 0.0047 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo | |
CVE-2026-50367 |
high | 7.8 | 0.0033 | 2026-07-14 | Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an auth | |
CVE-2026-50441 |
high | 7.8 | 0.0033 | 2026-07-14 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker | |
CVE-2026-50479 |
high | 7.8 | 0.0033 | 2026-07-14 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate pri | |
CVE-2026-55136 |
high | 7.8 | 0.0047 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c | |
CVE-2026-62737 |
high | 7.8 | 0.0033 | 2026-08-11 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges | 2 PoC |
CVE-2026-68810 |
high | 7.8 | 0.0047 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c | |
CVE-2026-96847 |
high | 7.8 | 0.0035 | 2026-10-13 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | |
CVE-2026-96931 |
high | 7.8 | 0.0035 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo | |
CVE-2026-96933 |
high | 7.8 | 0.0035 | 2026-10-13 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to | |
CVE-2026-69850 |
high | 7.8 | 0.0038 | 2026-10-13 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi | |
CVE-2026-70104 |
high | 7.8 | 0.0042 | 2026-10-13 | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to ele | |
CVE-2026-83587 |
high | 7.8 | 0.0036 | 2026-10-13 | Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate pri | |
CVE-2026-83848 |
high | 7.8 | 0.0042 | 2026-10-13 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to | |
CVE-2026-88126 |
high | 7.8 | 0.0036 | 2026-10-13 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26161 |
high | 7.8 | 0.0030 | 2026-04-14 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevat | |
CVE-2026-27919 |
high | 7.8 | 0.0030 | 2026-04-14 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author | |
CVE-2026-27920 |
high | 7.8 | 0.0024 | 2026-04-14 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author | |
CVE-2026-32077 |
high | 7.8 | 0.0032 | 2026-04-14 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author | |
CVE-2026-48340 |
high | 7.8 | 0.0029 | 2026-07-14 | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary | |
CVE-2026-24083 |
high | 7.8 | 0.0010 | 2026-08-04 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. | |
CVE-2026-7406 |
high | 7.8 | 0.0019 | 2026-08-06 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted | |
CVE-2026-45198 |
high | 7.8 | 0.0018 | 2026-08-07 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment | |
CVE-2026-18840 |
high | 7.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-19676 |
high | 7.8 | 0.0014 | 2026-10-21 | The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/p | |
CVE-2026-50424 |
high | 7.5 | 0.0117 | 2026-07-14 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny s | |
CVE-2026-105723 |
high | 7.5 | 0.0132 | 2026-10-13 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attack | |
CVE-2026-100205 |
high | 7.1 | 0.0041 | 2026-10-13 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges lo | |
CVE-2026-105729 |
high | 7.1 | 0.0036 | 2026-10-13 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges lo | |
CVE-2026-88098 |
high | 7.0 | 0.0020 | 2026-10-13 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized at | |
CVE-2026-96216 |
high | 7.0 | 0.0025 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |