Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14119 |
medium | 6.5 | 0.0016 | 2026-06-30 | Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker o | |
CVE-2026-14148 |
medium | 6.5 | 0.0032 | 2026-06-30 | Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain po | |
CVE-2026-54164 |
medium | 6.5 | 0.0034 | 2026-07-01 | API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions prior t | |
CVE-2026-110674 |
medium | 6.5 | 0.0020 | 2026-10-19 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowin | |
CVE-2026-114115 |
medium | 6.3 | 0.0028 | 2026-10-21 | Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that rea | |
CVE-2026-39956 |
medium | 6.1 | 0.0017 | 2026-04-13 | jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq's src/bui | |
CVE-2026-58305 |
medium | 6.1 | 0.0015 | 2026-07-09 | Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source E | |
CVE-2026-17866 |
medium | 5.8 | 0.0021 | 2026-07-30 | Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker w | |
CVE-2026-115892 |
medium | 5.7 | 0.0043 | 2026-10-23 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created | |
CVE-2026-50381 |
medium | 5.5 | 0.0040 | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Composite Image File System Driver | |
CVE-2026-96854 |
medium | 5.5 | 0.0038 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Windows Device Association Service | |
CVE-2026-70017 |
medium | 5.5 | 0.0046 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows a | |
CVE-2026-83664 |
medium | 5.5 | 0.0040 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System | |
CVE-2026-96921 |
medium | 5.5 | 0.0039 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manag | |
CVE-2026-20806 |
medium | 5.5 | 0.0034 | 2026-04-14 | Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized at | |
CVE-2026-112547 |
medium | 5.5 | 0.0017 | 2026-10-26 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadO | |
CVE-2026-70339 |
medium | 5.4 | 0.0041 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all | |
CVE-2026-6047 |
medium | 5.4 | 0.0015 | 2026-06-15 | LibreOffice can import documents in the OOXML format (DOCX). A heap buffer overflow existed when rep | |
CVE-2026-8358 |
medium | 5.4 | 0.0023 | 2026-06-15 | LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow exis | |
CVE-2026-88090 |
medium | 5.4 | — | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all | |
CVE-2026-59152 |
medium | 5.0 | 0.0020 | 2026-07-06 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an | |
CVE-2026-8554 |
low | 3.1 | 0.0017 | 2026-05-14 | Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacke | |
CVE-2026-116111 |
low | 2.1 | 0.0031 | 2026-10-26 | A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadst | |
CVE-2026-116370 |
low | 2.1 | 0.0040 | 2026-10-26 | A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected | 1 PoC |
CVE-2012-0507 |
— | — | 0.9819 | — | An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environ | KEV |
CVE-2019-0752 |
— | — | 0.8168 | — | A remote code execution vulnerability exists in the way that the scripting engine handles objects in | KEV |
CVE-2023-3079 |
— | — | 0.3786 | — | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to p | KEV |
CVE-2025-10585 |
— | — | 0.0897 | — | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. | KEV |
CVE-2025-13223 |
— | — | 0.0490 | — | Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption. | KEV |
CVE-2026-33937 |
— | — | 0.0191 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-33938 |
— | — | 0.0072 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-33940 |
— | — | 0.0072 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-34379 |
— | — | 0.0028 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-8389 |
— | — | 0.0042 | 2026-05-12 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox | |
CVE-2026-12298 |
— | — | 0.0031 | 2026-06-16 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR | |
CVE-2026-12299 |
— | — | 0.0031 | 2026-06-16 | JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-85046 |
— | — | 0.0181 | — | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute | KEV |
CVE-2026-65409 |
— | — | 0.0018 | 2026-09-14 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 | |
CVE-2026-84563 |
— | — | 0.0043 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS | |
CVE-2026-84602 |
— | — | 0.0016 | 2026-09-14 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadO | |
CVE-2026-84635 |
— | — | 0.0037 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 | |
CVE-2026-86872 |
— | — | 0.0027 | 2026-10-20 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, vision | |
CVE-2026-86922 |
— | — | 0.0034 | 2026-10-20 | A type confusion issue was addressed with improved state management. This issue is fixed in Safari 2 | |
CVE-2026-108518 |
— | — | 0.0027 | 2026-10-20 | DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is | |
CVE-2011-0611 |
— | — | 0.9941 | — | Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code o | KEV |