Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40422 |
medium | 5.5 | 0.0040 | 2026-07-14 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose inf | |
CVE-2026-49801 |
medium | 5.5 | 0.0040 | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l | |
CVE-2026-50455 |
medium | 5.5 | 0.0040 | 2026-07-14 | Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to | |
CVE-2026-50690 |
medium | 5.5 | 0.0040 | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l | |
CVE-2026-54997 |
medium | 5.5 | 0.0040 | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l | |
CVE-2026-55042 |
medium | 5.5 | 0.0054 | 2026-07-14 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform | |
CVE-2026-59136 |
medium | 5.5 | 0.0040 | 2026-08-11 | Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose | |
CVE-2026-59137 |
medium | 5.5 | 0.0040 | 2026-08-11 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disc | |
CVE-2026-70317 |
medium | 5.5 | 0.0043 | 2026-08-11 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform | |
CVE-2026-102187 |
medium | 5.5 | 0.0046 | 2026-10-13 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio | |
CVE-2026-96206 |
medium | 5.5 | 0.0045 | 2026-10-13 | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclo | |
CVE-2026-96850 |
medium | 5.5 | 0.0044 | 2026-10-13 | Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacke | |
CVE-2026-105731 |
medium | 5.5 | 0.0043 | 2026-10-13 | Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to discl | |
CVE-2026-70284 |
medium | 5.5 | 0.0046 | 2026-10-13 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis | |
CVE-2026-70293 |
medium | 5.5 | 0.0046 | 2026-10-13 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis | |
CVE-2026-83695 |
medium | 5.5 | 0.0047 | 2026-10-13 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disc | |
CVE-2026-83714 |
medium | 5.5 | 0.0045 | 2026-10-13 | Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose informat | |
CVE-2026-83723 |
medium | 5.5 | 0.0047 | 2026-10-13 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disc | |
CVE-2026-83755 |
medium | 5.5 | 0.0047 | 2026-10-13 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose informatio | |
CVE-2026-85320 |
medium | 5.5 | 0.0031 | 2026-10-13 | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d | |
CVE-2026-96247 |
medium | 5.5 | 0.0039 | 2026-10-13 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclo | |
CVE-2026-96849 |
medium | 5.5 | 0.0039 | 2026-10-13 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclo | |
CVE-2026-64309 |
medium | 5.5 | 0.0017 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize | |
CVE-2026-116739 |
medium | 5.3 | 0.0025 | 2026-10-26 | VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode functi | |
CVE-2026-56968 |
medium | 5.3 | 0.0041 | 2026-06-23 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM | |
CVE-2026-54500 |
medium | 5.3 | 0.0020 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-58247 |
medium | 5.3 | 0.0036 | 2026-08-11 | SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal | |
CVE-2026-83925 |
medium | 4.7 | 0.0072 | 2026-10-13 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio | |
CVE-2026-26175 |
medium | 4.6 | 0.0040 | 2026-04-14 | Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a se | |
CVE-2026-6686 |
medium | 4.6 | 0.0026 | 2026-07-01 | FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyo | |
CVE-2026-62377 |
medium | 4.3 | 0.0041 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF se | |
CVE-2026-11809 |
low | 3.7 | 0.0035 | 2026-08-10 | The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitiali | |
CVE-2026-56085 |
low | 3.3 | 0.0014 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-76042 |
low | 3.1 | 0.0025 | 2026-08-18 | Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attac | |
CVE-2026-115386 |
low | 2.1 | 0.0020 | 2026-10-22 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disc | |
CVE-2024-50302 |
— | — | 0.0081 | — | The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to l | KEV |
CVE-2025-5777 |
— | — | 0.9997 | — | Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient inp | KEV |
CVE-2026-6749 |
— | — | 0.0040 | 2026-04-21 | Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnera | |
CVE-2026-85880 |
— | — | 0.0039 | — | Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability | KEV |
CVE-2026-84622 |
— | — | 0.0018 | 2026-09-14 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO |