| Use of Externally-Controlled Format String | |
| CVE-2026-6472 | |
| Covert Timing Channel | |
| Buffer Overflow | |
| CVE-2026-6637 | |
| CVE-2026-6638 | |
| Link Following | |
| CVE-2026-6479 | |
| Integer Overflow or Wraparound | |
| Buffer Overflow | |
| Improper Validation of Specified Type of Input | |
| Improper Validation of Specified Index, Position, or Offset in Input | |
| Improper Validation of Specified Type of Input | |
| Missing Authorization | |
| Integer Overflow or Wraparound | |
| Exposure of Sensitive Information Through Metadata | |
| Inclusion of Functionality from Untrusted Control Sphere | |
| CRLF Injection | |
| Buffer Over-read | |
| Improper Neutralization | |
| External Control of System or Configuration Setting | |
| Incorrect Privilege Assignment | |
| Use of Less Trusted Source | |
| Improper Preservation of Consistency Between Independent Representations of Shared State | |