Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-16353 |
critical | 9.8 | 0.0060 | 2026-07-21 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-109774 |
critical | 9.8 | 0.0034 | 2026-10-13 | Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixe | |
CVE-2026-109618 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code e | KEV 710 PoC |
CVE-2026-109619 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote cod | KEV |
CVE-2026-39458 |
high | 8.7 | 0.0026 | 2026-05-13 | When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orche | |
CVE-2023-24978 |
high | 7.8 | 0.0023 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The | |
CVE-2026-45736 |
high | 7.5 | 0.0075 | 2026-05-15 | ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() | |
CVE-2026-16409 |
high | 7.5 | 0.0052 | 2026-07-21 | Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thun | |
CVE-2026-44411 |
high | 7.3 | 0.0010 | 2026-05-12 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affec | |
CVE-2026-6757 |
medium | 6.3 | 0.0049 | 2026-04-21 | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-115327 |
medium | 6.0 | 0.0031 | 2026-10-22 | libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rp | |
CVE-2026-6524 |
medium | 5.5 | 0.0012 | 2026-04-30 | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serv | |
CVE-2026-6870 |
medium | 5.5 | 0.0016 | 2026-04-30 | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of ser | |
CVE-2026-6778 |
medium | 5.3 | 0.0026 | 2026-04-21 | Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 | |
CVE-2023-29178 |
medium | 4.3 | 0.0095 | 2023-06-13 | A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 th | |
CVE-2023-24561 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24562 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24563 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2026-6748 |
— | — | 0.0040 | 2026-04-21 | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firef | |
CVE-2026-6749 |
— | — | 0.0040 | 2026-04-21 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnera | |
CVE-2026-6751 |
— | — | 0.0031 | 2026-04-21 | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firef |