Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-12293 |
critical | 9.8 | 0.0030 | 2026-06-16 | Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Th | |
CVE-2025-49794 |
critical | 9.1 | 0.0083 | 2025-06-16 | A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements u | |
CVE-2026-6100 |
critical | 9.1 | 0.0058 | 2026-04-13 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.G | |
CVE-2026-58592 |
high | 8.9 | 0.0055 | 2026-07-01 | Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly E | |
CVE-2026-53918 |
high | 8.8 | 0.0050 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.1 | |
CVE-2026-7111 |
high | 8.4 | 0.0016 | 2026-04-29 | Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend th | |
CVE-2026-10671 |
high | 7.1 | 0.0016 | 2026-07-14 | In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kerne | |
CVE-2026-102010 |
high | 7.0 | 0.0033 | 2026-09-28 | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority q | |
CVE-2026-35094 |
medium | 5.5 | 0.0014 | 2026-04-01 | A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system | |
CVE-2026-6040 |
medium | 5.4 | 0.0016 | 2026-06-15 | A heap use-after-free existed when importing the blank-width characters of an ODF number format. A p | |
CVE-2026-57435 |
low | 1.7 | 0.0046 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-34734 |
— | — | 0.0019 | 2026-04-09 | HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the | |
CVE-2026-6746 |
— | — | 0.0095 | 2026-04-21 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firef | |
CVE-2026-6747 |
— | — | 0.0040 | 2026-04-21 | Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140 | |
CVE-2026-6754 |
— | — | 0.0039 | 2026-04-21 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Fire | |
CVE-2026-34001 |
— | — | 0.0026 | 2026-04-23 | A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence | |
CVE-2026-8090 |
— | — | 0.0032 | 2026-05-07 | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Fi | |
CVE-2026-8390 |
— | — | 0.0050 | 2026-05-12 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 | |
CVE-2026-12291 |
— | — | 0.0038 | 2026-06-16 | Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firef | |
CVE-2026-12326 |
— | — | 0.0036 | 2026-06-16 | Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of | |
CVE-2026-12328 |
— | — | 0.0048 | 2026-06-16 | Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefo |