openshift/ose-rhel-coreos-8

Direct Vulnerabilities

Known vulnerabilities in the openshift/ose-rhel-coreos-8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Use After Free

*
  • H
Expired Pointer Dereference

*
  • L
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
NULL Pointer Dereference

*
  • M
Reachable Assertion

*
  • M
Expired Pointer Dereference

*
  • M
Deadlock

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Improper Resource Locking

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Out-of-bounds Read

*
  • M
Integer Underflow

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Information Exposure

*
  • M
Expired Pointer Dereference

*
  • H
Incorrect Default Permissions

*
  • M
Incomplete Cleanup

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • H
Expired Pointer Dereference

*
  • H
NULL Pointer Dereference

*
  • M
Incomplete Cleanup

*
  • M
Out-of-bounds Read

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Improper Resource Locking

*
  • L
Information Exposure

*
  • L
Information Exposure

*
  • M
Divide By Zero

*
  • L
Improper Control of a Resource Through its Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Untrusted Pointer Dereference

*
  • M
Use of Uninitialized Resource

*
  • H
NULL Pointer Dereference

*
  • M
Missing Lock Check

*
  • M
Out-of-bounds Write

*
  • M
Directory Traversal

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Use of Uninitialized Variable

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Incorrect Synchronization

*
  • M
Information Exposure

*
  • M
Expired Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • L
Improper Update of Reference Count

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Missing Initialization of Resource

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Information Exposure

*
  • L
Deadlock

*
  • M
Expired Pointer Dereference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Use of Uninitialized Variable

*
  • M
Out-of-bounds Write

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Out-of-bounds Write

*
  • M
Race Condition

*
  • M
Incomplete Blacklist

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
OS Command Injection

*
  • M
Use of Uninitialized Variable

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Synchronization

*
  • M
Out-of-bounds Write

*
  • M
Divide By Zero

*
  • M
Use After Free

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

*
  • H
Access of Uninitialized Pointer

*
  • M
Divide By Zero

*
  • H
Integer Overflow or Wraparound

*
  • L
Access of Uninitialized Pointer

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Authentication Bypass

*
  • H
Incorrect Default Permissions

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • H
Algorithmic Complexity

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Use of Uninitialized Resource

*
  • M
Use of Uninitialized Resource

*
  • M
Improper Locking

*
  • M
CVE-2026-99206

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
NULL Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Read

*
  • M
Reachable Assertion

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Deadlock

*
  • M
Use After Free

*
  • M
Improper Preservation of Permissions

*
  • M
NULL Pointer Dereference

*
  • M
Reachable Assertion

*
  • M
Files or Directories Accessible to External Parties

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Validation of Consistency within Input

*
  • M
CVE-2026-98823

*
  • M
Incorrectly Specified Destination in a Communication Channel

*
  • M
Expired Pointer Dereference

*
  • L
Improper Preservation of Permissions

*
  • M
Origin Validation Error

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Improper Verification of Source of a Communication Channel

*
  • L
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Incomplete Cleanup

*
  • L
Information Exposure

*
  • M
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • L
Out-of-bounds Read

*
  • M
Incorrect Synchronization

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Numeric Truncation Error

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • H
Reusing a Nonce

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Race Condition

*
  • M
NULL Pointer Dereference

*
  • L
Information Exposure

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • L
Premature Release of Resource During Expected Lifetime

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Race Condition

*
  • M
NULL Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Race Condition

*
  • M
Out-of-bounds Read

*
  • H
Use After Free

*
  • M
Expired Pointer Dereference

*
  • H
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
Race Condition

*
  • M
Deadlock

*
  • M
Improper Resource Locking

*
  • M
NULL Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Race Condition

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Update of Reference Count

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Race Condition

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Out-of-bounds Read

*
  • M
Information Exposure

*
  • L
Use of Uninitialized Resource

*
  • M
Use of Uninitialized Resource

*
  • L
Use of Uninitialized Resource

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Improper Preservation of Permissions

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Comparison Using Wrong Factors

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Use After Free

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Incomplete Cleanup

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Expired Pointer Dereference

*
  • M
Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
CVE-2026-98855

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Integer Underflow

*
  • M
Out-of-bounds Read

*
  • M
Divide By Zero

*
  • H
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Premature Release of Resource During Expected Lifetime

*
  • L
Use of Uninitialized Resource

*
  • M
Integer Overflow or Wraparound

*
  • M
Files or Directories Accessible to External Parties

*
  • M
Detection of Error Condition Without Action

*
  • M
Function Call with Incorrectly Specified Arguments

*
  • M
Deadlock

*
  • L
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Out-of-bounds Read

*
  • M
Deadlock

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Initialization of Resource

*
  • M
Buffer Overflow

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Operation on a Resource after Expiration or Release

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • H
Insufficient Verification of Data Authenticity

*
  • M
Resource Exhaustion

*
  • L
Missing Authorization

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Improper Input Validation

*
  • M
Missing Encryption of Sensitive Data

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Release of Invalid Pointer or Reference

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Insufficient Session Expiration

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Operation on a Resource after Expiration or Release

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Resource Exhaustion

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Integer Overflow or Wraparound

*
  • H
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Bitwise Shift of Integer

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Out-of-bounds Write

*
  • H
Incomplete Cleanup

*
  • M
Unchecked Return Value

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • H
Reachable Assertion

*
  • H
Reachable Assertion

*
  • M
Race Condition

*
  • H
Privilege Context Switching Error

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Out-of-bounds Read

*
  • M
Reachable Assertion

*
  • L
Missing Synchronization

*
  • M
Divide By Zero

*
  • M
Access of Uninitialized Pointer

*
  • L
Missing Initialization of Resource

*
  • L
Use of Uninitialized Resource

*
  • L
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Race Condition

*
  • M
Reachable Assertion

*
  • L
Unchecked Input for Loop Condition

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Race Condition

*
  • M
Out-of-bounds Read

*
  • M
CVE-2026-98719

*
  • M
Race Condition

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • L
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Use of Uninitialized Resource

*
  • L
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • M
Expired Pointer Dereference

*
  • H
Race Condition

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Improper Handling of Case Sensitivity

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Array Index

*
  • M
NULL Pointer Dereference

*
  • L
Deadlock

*
  • L
Reachable Assertion

*
  • M
NULL Pointer Dereference

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • C
Improper Certificate Validation

*
  • L
Use After Free

*
  • L
Improper Certificate Validation

*
  • M
Use After Free

*
  • M
Symlink Following

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

*
  • M
Uncontrolled Recursion

*
  • M
Improper Certificate Validation

*
  • M
Directory Traversal

*
  • L
Out-of-Bounds

*
  • L
Out-of-bounds Write

*
  • L
Improper Neutralization

*
  • L
Heap-based Buffer Overflow

*
  • L
Comparison Using Wrong Factors

*
  • L
Out-of-bounds Read

*
  • L
Insecure Default Initialization of Resource

*
  • L
Use After Free

*
  • L
Use After Free

*
  • L
Double Free

*
  • M
Inappropriate Encoding for Output Context

*
  • M
Heap-based Buffer Overflow

*
  • L
Heap-based Buffer Overflow

*
  • L
Heap-based Buffer Overflow

*
  • L
Inappropriate Encoding for Output Context

*
  • L
NULL Pointer Dereference

*
  • L
Directory Traversal

*
  • L
Information Exposure

*
  • L
Covert Timing Channel

*
  • M
Expired Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
NULL Pointer Dereference

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Out-of-bounds Write

*
  • M
Premature Release of Resource During Expected Lifetime

*
  • M
Incomplete Cleanup

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Integer Overflow or Wraparound

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Reachable Assertion

*
  • M
Use After Free

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • M
Use of Multiple Resources with Duplicate Identifier

*
  • H
Integer Underflow

*
  • L
Out-of-bounds Read

*
  • M
CVE-2026-98515

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Improper Update of Reference Count

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Input Validation

*
  • M
Buffer Underflow

*
  • L
Improper Update of Reference Count

*
  • M
Improper Update of Reference Count

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • L
Reachable Assertion

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • H
Incorrect Conversion between Numeric Types

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Improperly Implemented Security Check for Standard

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • L
Incorrect Conversion between Numeric Types

*
  • H
Expired Pointer Dereference

*
  • H
Cleartext Transmission of Sensitive Information

*
  • M
Improper Update of Reference Count

*
  • M
Improper Input Validation

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Improper Update of Reference Count

*
  • L
Deadlock

*
  • M
Out-of-bounds Read

*
  • C
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • L
Incorrect Synchronization

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Validation of Unsafe Equivalence in Input

*
  • M
Use of Uninitialized Resource

*
  • L
Uncaught Exception

*
  • L
Improper Validation of Specified Quantity in Input

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Improper Update of Reference Count

*
  • L
File Descriptor Leak

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Validation of Specified Quantity in Input

*
  • L
Access of Uninitialized Pointer

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • L
Divide By Zero

*
  • M
Divide By Zero

*
  • L
Return of Wrong Status Code

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Premature Release of Resource During Expected Lifetime

*
  • L
Off-by-one Error

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Use After Free

*
  • H
Out-of-bounds Read

*
  • L
Incorrect Bitwise Shift of Integer

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Deadlock

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Off-by-one Error

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Access of Uninitialized Pointer

*
  • L
Missing Lock Check

*
  • M
NULL Pointer Dereference

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Incorrect Check of Function Return Value

*
  • M
Out-of-bounds Write

*
  • L
Incorrect Synchronization

*
  • L
Release of Invalid Pointer or Reference

*
  • M
Use After Free

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Race Condition

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
Access of Uninitialized Pointer

*
  • L
Access of Uninitialized Pointer

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Uncontrolled Recursion

*
  • L
Race Condition

*
  • M
Buffer Access with Incorrect Length Value

*
  • L
NULL Pointer Dereference

*
  • M
Reachable Assertion

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Memory Leak

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Resource Exhaustion

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
Access of Uninitialized Pointer

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Use of Out-of-range Pointer Offset

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Buffer Access with Incorrect Length Value

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Release of Invalid Pointer or Reference

*
  • L
NULL Pointer Dereference

*
  • L
Incomplete Cleanup

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Incomplete Model of Endpoint Features

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Improper Update of Reference Count

*
  • L
Missing Default Case in Switch Statement

*
  • L
Incorrect Calculation of Buffer Size

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
OS Command Injection

*
  • L
Incomplete Cleanup

*
  • L
Information Exposure

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Directory Traversal

*
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • L
Reachable Assertion

*
  • L
Divide By Zero

*
  • M
Race Condition

*
  • M
Incorrect Authorization

*
  • L
Reachable Assertion

*
  • M
Use After Free

*
  • M
Improper Access Control

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Improper Input Validation

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Return of Wrong Status Code

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Incomplete Cleanup

*
  • M
Race Condition

*
  • L
Missing Lock Check

*
  • M
Use After Free

*
  • M
Multiple Locks of a Critical Resource

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Update of Reference Count

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Improper Handling of Length Parameter Inconsistency

*
  • M
Integer Overflow or Wraparound

*
  • M
Race Condition

*
  • M
Integer Overflow or Wraparound

*
  • M
Race Condition

*
  • M
Integer Overflow or Wraparound

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Certificate Validation

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

*
  • L
Incomplete Cleanup

*
  • L
Out-of-bounds Read

*
  • M
Improper Certificate Validation

*
  • M
Use After Free

*
  • L
Use of Function with Inconsistent Implementations

*
  • M
Divide By Zero

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • L
Incorrect Calculation of Buffer Size

*
  • L
Integer Overflow or Wraparound

*
  • M
Missing Initialization of Resource

*
  • M
Use After Free

*
  • M
Use of Uninitialized Variable

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • L
Unchecked Return Value

*
  • L
Reachable Assertion

*
  • M
Deadlock

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Out-of-bounds Write

*
  • M
Incorrect Check of Function Return Value

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Reachable Assertion

*
  • M
Use After Free

*
  • M
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Expired Pointer Dereference

*
  • M
Use After Free

*
  • H
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Improper Update of Reference Count

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
NULL Pointer Dereference

*
  • M
Improper Check or Handling of Exceptional Conditions

*
  • M
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • M
Information Exposure

*
  • L
Integer Overflow or Wraparound

*
  • M
Improper Input Validation

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Incorrect Bitwise Shift of Integer

*
  • L
Unchecked Input for Loop Condition

*
  • M
Use After Free

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Resource Exhaustion

*
  • L
Access of Uninitialized Pointer

*
  • L
Use of Uninitialized Resource

*
  • L
Expired Pointer Dereference

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Information Exposure Through Caching

*
  • L
Integer Overflow or Wraparound

*
  • M
Reachable Assertion

*
  • L
Improper Update of Reference Count

*
  • M
Use After Free

*
  • M
Use After Free

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Use of Uninitialized Resource

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Input Validation

*
  • M
Use of Out-of-range Pointer Offset

*
  • L
NULL Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • M
Improper Certificate Validation

*
  • M
Race Condition

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Expired Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
Reachable Assertion

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • H
Race Condition

*
  • M
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Race Condition

*
  • M
Integer Overflow or Wraparound

*
  • M
Reachable Assertion

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • H
Incorrect Privilege Assignment

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Use of Uninitialized Resource

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Integer Underflow

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • H
Race Condition

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Improper Input Validation

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Reachable Assertion

*
  • M
Improper Input Validation

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Information Exposure

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • L
Race Condition

*
  • M
Improper Resource Locking

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Improper Preservation of Permissions

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Information Exposure

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use of Uninitialized Variable

*
  • M
Improper Input Validation

*
  • H
Expired Pointer Dereference

*
  • M
Incorrect Calculation of Buffer Size

*
  • H
Expired Pointer Dereference

*
  • H
Incorrect Privilege Assignment

*
  • M
Incorrect Synchronization

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
NULL Pointer Dereference

*
  • M
Improper Update of Reference Count

*
  • M
Out-of-bounds Read

*
  • H
Improper Verification of Source of a Communication Channel

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • H
Out-of-bounds Write

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • H
Use of Uninitialized Resource

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Link Following

*
  • H
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Release of Invalid Pointer or Reference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Exposure of Data Element to Wrong Session

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • H
Expired Pointer Dereference

*
  • H
Arbitrary Argument Injection

*
  • M
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Incorrect Behavior Order: Early Amplification

*
  • L
Integer Overflow or Wraparound

*
  • L
Link Following

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Comparison Using Wrong Factors

*
  • M
Out-of-bounds Read

*
  • M
Improper Neutralization

*
  • M
Out-of-bounds Write

*
  • M
Off-by-one Error

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Buffer Underflow

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Use After Free

*
  • L
Race Condition

*
  • L
NULL Pointer Dereference

*
  • M
Deadlock

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Unchecked Return Value

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • M
Exposure of Private Information ('Privacy Violation')

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Missing Lock Check

*
  • M
Information Exposure

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Information Exposure

*
  • M
Reachable Assertion

*
  • M
Out-of-bounds Read

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Incomplete Cleanup

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Incomplete Cleanup

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Reachable Assertion

*
  • L
Excessive Reliance on Global Variables

*
  • M
Use After Free

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Information Exposure

*
  • L
Use of Uninitialized Resource

*
  • M
Improper Update of Reference Count

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Expired Pointer Dereference

*
  • L
Deadlock

*
  • L
NULL Pointer Dereference

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Improper Enforcement of Behavioral Workflow

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Buffer Access with Incorrect Length Value

*
  • L
Unchecked Input for Loop Condition

*
  • M
Numeric Range Comparison Without Minimum Check

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Validation of Integrity Check Value

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Divide By Zero

*
  • L
Improper Update of Reference Count

*
  • M
Use of Uninitialized Resource

*
  • M
Improper Resource Locking

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Detection of Error Condition Without Action

*
  • M
Incomplete Cleanup

*
  • M
Expired Pointer Dereference

*
  • L
Information Exposure Through Caching

*
  • L
Improper Validation of Specified Quantity in Input

*
  • M
Unchecked Input for Loop Condition

*
  • M
Out-of-bounds Read

*
  • M
Comparison Using Wrong Factors

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Race Condition

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Improper Access Control

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Use After Free

*
  • M
Memory Leak

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Race Condition

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Use of Uninitialized Resource

*
  • H
External Control of System or Configuration Setting

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • L
Use of Uninitialized Resource

*
  • L
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • L
Improper Update of Reference Count

*
  • M
Incorrect Conversion between Numeric Types

*
  • M
Out-of-bounds Write

*
  • L
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Improper Resource Locking

*
  • M
Out-of-bounds Read

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Origin Validation Error

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • H
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Untrusted Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Race Condition

*
  • L
Incomplete Cleanup

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Expired Pointer Dereference

*
  • M
Inappropriate Encoding for Output Context

*
  • M
Improper Cross-boundary Removal of Sensitive Data

*
  • M
Out-of-bounds Write

*
  • M
Algorithmic Complexity

*
  • M
Integer Overflow or Wraparound

*
  • L
Expected Behavior Violation

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • M
Information Exposure

*
  • H
Out-of-bounds Write

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • L
Incorrect Conversion between Numeric Types

*
  • L
Deadlock

*
  • L
Deadlock

*
  • M
Integer Underflow

*
  • L
Incorrect Bitwise Shift of Integer

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • L
Missing Synchronization

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Missing Report of Error Condition

*
  • M
Multiple Locks of a Critical Resource

*
  • M
NULL Pointer Dereference

*
  • H
Use After Free

*
  • H
Out-of-bounds Read

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Out-of-bounds Write

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Improper Update of Reference Count

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Trust Boundary Violation

*
  • H
Resource Exhaustion

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • H
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • H
Heap-based Buffer Overflow

*
  • L
Buffer Access with Incorrect Length Value

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Write

*
  • L
Incorrect Implementation of Authentication Algorithm

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • H
Improper Validation of Specified Quantity in Input

*
  • M
Buffer Overflow

*
  • H
Improper Handling of Unicode Encoding

*
  • M
Improper Handling of Insufficient Permissions or Privileges

*
  • L
Improper Update of Reference Count

*
  • M
Authentication Bypass

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Comparison Using Wrong Factors

*
  • L
Out-of-bounds Write

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Expired Pointer Dereference

*
  • M
Improper Handling of Inconsistent Special Elements

*
  • H
Reachable Assertion

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Expired Pointer Dereference

*
  • M
Origin Validation Error

*
  • H
Integer Overflow or Wraparound

*
  • H
Reachable Assertion

*
  • M
Improper Verification of Cryptographic Signature

*
  • L
Use After Free

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Incorrect Synchronization

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Information Exposure

*
  • M
Use After Free

*
  • H
Algorithmic Complexity

*
  • L
Excessive Platform Resource Consumption within a Loop

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Integer Overflow or Wraparound

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Information Exposure

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Out-of-bounds Read

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Integer Underflow

*
  • L
Incorrect Synchronization

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Buffer Access with Incorrect Length Value

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Link Following

*
  • M
Link Following

*
  • L
Improper Update of Reference Count

*
  • M
Out-of-bounds Write

*
  • M
Operation on a Resource after Expiration or Release

*
  • L
Improper Update of Reference Count

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Directory Traversal

*
  • M
Buffer Overflow

*
  • M
Buffer Overflow

*
  • H
Incomplete Cleanup

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Resource Exhaustion

*
  • M
Improper Preservation of Permissions

*
  • M
Access of Uninitialized Pointer

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Information Exposure

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Information Exposure

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • H
Expired Pointer Dereference

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Race Condition

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • L
Missing Initialization of Resource

*
  • M
Protection Mechanism Failure

*
  • H
Expired Pointer Dereference

*
  • L
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Access Control

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • H
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • H
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Incorrect Synchronization

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Synchronization

*
  • M
Improper Input Validation

*
  • M
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • L
Improper Handling of Length Parameter Inconsistency

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Access of Uninitialized Pointer

*
  • M
Out-of-bounds Write

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Use After Free

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Resource Exhaustion

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Use After Free

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • H
Buffer Overflow

*
  • M
Resource Exhaustion

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • L
Incorrect Synchronization

*
  • M
Access of Uninitialized Pointer

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Handling of Length Parameter Inconsistency

*
  • M
Integer Underflow

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Improper Cross-boundary Removal of Sensitive Data

*
  • M
Integer Overflow or Wraparound

*
  • H
Buffer Overflow

*
  • H
Information Exposure

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Comparison Using Wrong Factors

*
  • M
Resource Exhaustion

*
  • M
Out-of-bounds Write

*
  • H
OS Command Injection

*
  • L
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • M
Improper Certificate Validation

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Out-of-bounds Write

*
  • L
Reachable Assertion

*
  • M
Buffer Overflow

*
  • M
Information Exposure

*
  • L
Integer Overflow or Wraparound

*
  • M
Expired Pointer Dereference

*
  • M
Use of Insufficiently Random Values

*
  • M
Authentication Bypass

*
  • L
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • M
Incorrect Resource Transfer Between Spheres

*
  • M
Reliance on Cookies without Validation and Integrity Checking

*
  • M
Link Following

*
  • H
OS Command Injection

*
  • H
Not Failing Securely ('Failing Open')

*
  • M
Reachable Assertion

*
  • M
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Expired Pointer Dereference

*
  • M
Integer Coercion Error

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Buffer Overflow

*
  • M
Missing Initialization of Resource

*
  • M
NULL Pointer Dereference

*
  • H
Link Following

*
  • H
Incorrect Authorization

*
  • M
Use of Blocking Code in Single-threaded, Non-blocking Context

*
  • M
Information Exposure

*
  • M
Divide By Zero

*
  • M
Use of Externally-Controlled Format String

*
  • M
Arbitrary Argument Injection

*
  • H
Directory Traversal

*
  • H
CVE-2026-89161

*
  • M
Expired Pointer Dereference

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Improper Access Control

*
  • L
Incorrect Permission Assignment for Critical Resource

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Stack-based Buffer Overflow

*
  • L
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • H
Improper Certificate Validation

*
  • H
HTTP Request Smuggling

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • L
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • M
Heap-based Buffer Overflow

*
  • H
HTTP Request Smuggling

*
  • M
Link Following

*
  • M
Out-of-bounds Read

*
  • M
HTTP Request Smuggling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Authentication Bypass by Primary Weakness

*
  • M
Out-of-bounds Read

*
  • M
Improper Null Termination

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Buffer Overflow

*
  • H
External Control of File Name or Path

*
  • M
Directory Traversal

*
  • M
Information Exposure

*
  • L
Incorrect Implementation of Authentication Algorithm

*
  • M
Use After Free

*
  • M
Integer Overflow or Wraparound

*
  • L
Release of Invalid Pointer or Reference

*
  • H
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Directory Traversal

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • L
Integer Overflow or Wraparound

*
  • H
Expired Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
NULL Pointer Dereference

*
  • M
Improper Restriction of Excessive Authentication Attempts

*
  • M
Information Exposure

*
  • M
Uncontrolled Recursion

*
  • M
Improper Validation of Array Index

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • M
Improper Preservation of Permissions

*
  • M
Incorrect Privilege Assignment

*
  • M
Insufficient Verification of Data Authenticity

*
  • M
Out-of-bounds Write

*
  • L
Use of Less Trusted Source

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
CVE-2026-6368

*
  • L
Improperly Implemented Security Check for Standard

*
  • M
Integer Overflow or Wraparound

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Restriction of Communication Channel to Intended Endpoints

*
  • M
CVE-2026-64535

*
  • M
Out-of-bounds Read

*
  • M
Information Exposure

*
  • M
Improper Update of Reference Count

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • H
Link Following

*
  • M
Out-of-bounds Read

*
  • L
Information Exposure

*
  • M
Misinterpretation of Input

*
  • M
Out-of-bounds Write

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Use of Externally-Controlled Format String

*
  • L
Expired Pointer Dereference

*
  • H
Improper Control of Dynamically-Identified Variables

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Out-of-bounds Read

*
  • M
Buffer Overflow

*
  • M
Improper Restriction of Excessive Authentication Attempts

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
OS Command Injection

*
  • H
Link Following

*
  • H
Use of Incorrect Operator

*
  • H
OS Command Injection

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Integer Overflow or Wraparound

*
  • M
Double Free

*
  • L
NULL Pointer Dereference

*
  • M
Directory Traversal

*
  • M
Off-by-one Error

*
  • M
Uncontrolled Recursion

*
  • M
Out-of-bounds Write

*
  • H
Improperly Implemented Security Check for Standard

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • L
Inappropriate Encoding for Output Context

*
  • H
Link Following

*
  • H
Function Call with Incorrectly Specified Arguments

*
  • M
OS Command Injection

*
  • M
Buffer Over-read

*
  • L
Use After Free

*
  • M
Integer Overflow or Wraparound

*
  • L
Asymmetric Resource Consumption (Amplification)

*
  • H
Link Following

*
  • M
Link Following

*
  • H
Link Following

*
  • M
Authentication Bypass

*
  • M
Incomplete Filtering of Special Elements

*
  • M
NULL Pointer Dereference

*
  • M
Directory Traversal

*
  • L
Origin Validation Error

*
  • M
NULL Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • H
Link Following

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • H
Expired Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Comparison Using Wrong Factors

*
  • H
OS Command Injection

*
  • M
Incorrect Bitwise Shift of Integer

*
  • H
Write-what-where Condition

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • M
Out-of-bounds Read

*
  • H
Heap-based Buffer Overflow

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Certificate Validation

*
  • L
Information Exposure

*
  • H
Improper Validation of Specified Type of Input

*
  • L
Directory Traversal

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • H
Write-what-where Condition

*
  • L
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • M
Cleartext Transmission of Sensitive Information

*
  • H
Integer Overflow or Wraparound

*
  • H
Out-of-bounds Read

*
  • M
Exposure of Data Element to Wrong Session

*
  • L
Improper Privilege Management

*
  • H
Buffer Access with Incorrect Length Value

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Uncontrolled Recursion

*
  • M
Heap-based Buffer Overflow

*
  • L
Out-of-bounds Write

*
  • L
NULL Pointer Dereference

*
  • L
Improper Certificate Validation

*
  • M
Improper Input Validation

*
  • L
Improper Validation of Integrity Check Value

*
  • L
Improper Update of Reference Count

*
  • M
Resource Exhaustion

*
  • M
Integer Overflow or Wraparound

*
  • M
NULL Pointer Dereference

*
  • M
Improper Neutralization of Null Byte or NUL Character

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Link Following

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Buffer Access with Incorrect Length Value

*
  • H
Write-what-where Condition

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Incorrect Execution-Assigned Permissions

*
  • L
NULL Pointer Dereference

*
  • M
Improper Handling of Inconsistent Special Elements

*
  • M
Integer Overflow or Wraparound

*
  • L
Missing Authentication for Critical Function

*
  • M
Incorrect Calculation of Buffer Size

*
  • H
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Expired Pointer Dereference

*
  • M
Improper Certificate Validation

*
  • M
Directory Traversal

*
  • H
Predictable from Observable State

*
  • H
Out-of-bounds Read

*
  • M
Buffer Overflow

*
  • L
Improper Verification of Cryptographic Signature

*
  • L
Information Exposure

*
  • L
Improper Validation of Specified Type of Input

*
  • M
Improper Validation of Consistency within Input

*
  • H
Access of Uninitialized Pointer

*
  • H
Improper Update of Reference Count

*
  • H
Access of Uninitialized Pointer

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Integrity Check Value

*
  • M
Improper Validation of Consistency within Input

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • L
Improper Handling of Missing Special Element

*
  • L
NULL Pointer Dereference

*
  • M
Buffer Underflow

*
  • H
Expired Pointer Dereference

*
  • M
Authentication Bypass by Primary Weakness

*
  • M
OS Command Injection

*
  • H
Insufficient Verification of Data Authenticity

*
  • L
Improper Validation of Integrity Check Value

*
  • M
Off-by-one Error

*
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • M
Reachable Assertion

*
  • M
OS Command Injection

*
  • M
Link Following

*
  • M
Out-of-bounds Read

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • L
Integer Overflow or Wraparound

*
  • M
NULL Pointer Dereference

*
  • M
Improper Validation of Syntactic Correctness of Input

*
  • M
Out-of-bounds Read

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • L
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • H
Improper Validation of Integrity Check Value

*
  • L
Out-of-bounds Read

*
  • H
OS Command Injection

*
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Information Exposure

*
  • M
Improper Certificate Validation

*
  • M
Out-of-bounds Read

*
  • M
Uncontrolled Recursion

*
  • L
Out-of-bounds Read

*
  • M
External Control of File Name or Path

*
  • L
Out-of-bounds Read

*
  • H
Out-of-bounds Read

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Improper Handling of Insufficient Permissions or Privileges

*
  • M
Integer Underflow

*
  • M
Link Following

*
  • M
Out-of-bounds Read

*
  • L
Unchecked Input for Loop Condition

*
  • H
Improper Handling of Length Parameter Inconsistency

*
  • M
Out-of-bounds Read

*
  • M
Uncontrolled Recursion

*
  • L
Improper Verification of Cryptographic Signature

*
  • M
Integer Underflow

*
  • M
Execution with Unnecessary Privileges

*
  • M
Expired Pointer Dereference

*
  • H
Integer Underflow

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Stack-based Buffer Overflow

*
  • L
Uncontrolled Recursion

*
  • H
Improper Preservation of Permissions

*
  • L
Improper Null Termination

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Off-by-one Error

*
  • M
Improper Access Control

*
  • H
Undefined Behavior for Input to API

*
  • M
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • H
Symlink Following

*
  • H
Least Privilege Violation

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Handling of Case Sensitivity

*
  • M
Reachable Assertion

*
  • M
Directory Traversal

*
  • L
Stack-based Buffer Overflow

*
  • M
Insufficient Verification of Data Authenticity

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
External Control of System or Configuration Setting

*
  • M
Integer Underflow

*
  • L
Use of Uninitialized Resource

*
  • M
Reachable Assertion

*
  • M
Link Following

*
  • H
OS Command Injection

*
  • H
Reachable Assertion

*
  • H
Improper Access Control

*
  • H
Reachable Assertion

*
  • L
Memory Leak

*
  • M
Directory Traversal

*
  • M
Uncontrolled Recursion

*
  • M
OS Command Injection

*
  • L
Incorrect Behavior Order: Early Validation

*
  • L
CVE-2026-28387

*
  • M
Buffer Overflow

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Buffer Overflow

*
  • M
Buffer Access with Incorrect Length Value

*
  • H
Numeric Truncation Error

*
  • M
Improper Handling of Case Sensitivity

*
  • M
Permissive Regular Expression

*
  • L
Out-of-bounds Read

*
  • L
Integer Overflow or Wraparound

*
  • L
OS Command Injection

*
  • H
Out-of-bounds Write

*
  • H
Improper Null Termination

*
  • L
Integer Underflow

*
  • H
Insecure Default Initialization of Resource

*
  • H
Out-of-bounds Read

*
  • M
Integer Underflow

*
  • H
Insufficient Verification of Data Authenticity

*
  • M
Memory Leak

*
  • M
Incorrect Implementation of Authentication Algorithm

*
  • H
Execution with Unnecessary Privileges

*
  • L
Reachable Assertion

*
  • H
Link Following

*
  • M
Uncontrolled Recursion

*
  • M
Reachable Assertion

*
  • M
Link Following

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Out-of-bounds Read

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Validation of Consistency within Input

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Memory Leak

*
  • M
Buffer Overflow

*
  • H
Insufficient Verification of Data Authenticity

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Directory Traversal

*
  • L
Algorithmic Complexity

*
  • M
Stack-based Buffer Overflow

*
  • L
Misinterpretation of Input

*
  • M
Buffer Underflow

*
  • L
External Control of File Name or Path

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Directory Traversal

*
  • H
Resource Exhaustion

*
  • L
Out-of-bounds Read

*
  • M
Improper Certificate Validation

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Required Cryptographic Step

*
  • M
Uncontrolled Search Path Element

*
  • H
OS Command Injection

*
  • M
Integer Overflow or Wraparound

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Incorrect Calculation of Multi-Byte String Length

*
  • M
Buffer Over-read

*
  • H
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • H
CRLF Injection

*
  • M
Out-of-bounds Read

*
  • L
Stack-based Buffer Overflow

*
  • M
Incorrect Calculation of Buffer Size

*
  • L
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • L
Unchecked Input for Loop Condition

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Out-of-bounds Read

*
  • H
CRLF Injection

*
  • M
Unchecked Input for Loop Condition

*
  • M
Directory Traversal

*
  • M
NULL Pointer Dereference

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Double Free

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • M
Incorrect Calculation

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Double Free

*
  • M
NULL Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • M
Directory Traversal

*
  • H
Incorrect Authorization

*
  • L
Improper Validation of Specified Index, Position, or Offset in Input

*
  • H
Link Following

*
  • M
Improper Privilege Management

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Release of Invalid Pointer or Reference

*
  • M
Out-of-bounds Read

*
  • L
Resource Exhaustion

*
  • L
Out-of-bounds Read

*
  • L
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • L
Use After Free

*
  • M
Missing Authentication for Critical Function

*
  • M
Link Following

*
  • M
Use After Free

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Incorrect Calculation of Buffer Size

*
  • H
OS Command Injection

*
  • M
Use After Free

*
  • M
Reachable Assertion

*
  • M
Expected Behavior Violation

*
  • M
Use After Free

*
  • L
Improper Validation of Specified Quantity in Input

*
  • M
Reachable Assertion

*
  • M
Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

*
  • M
Insufficient Granularity of Access Control

*
  • L
Stack-based Buffer Overflow

*
  • H
Out-of-bounds Read

*
  • M
Improper Use of Validation Framework

*
  • H
Buffer Overflow

*
  • L
Improper Certificate Validation

*
  • H
Integer Underflow

*
  • M
Improper Certificate Validation

*
  • M
Improper Check for Unusual or Exceptional Conditions

*
  • M
Heap-based Buffer Overflow

*
  • L
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Unrestricted Externally Accessible Lock

*
  • H
Resource Exhaustion

*
  • H
Directory Traversal

*
  • L
NULL Pointer Dereference

*
  • M
Buffer Overflow

*
  • L
Buffer Overflow

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Out-of-bounds Write

*
  • M
Return of Wrong Status Code

*
  • L
Out-of-bounds Read

*
  • L
Out-of-bounds Read

*
  • L
NULL Pointer Dereference

*
  • M
Directory Traversal

*
  • H
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Out-of-bounds Read

*
  • H
Improper Certificate Validation

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-Bounds

*
  • M
Out-of-bounds Write

*
  • L
Integer Overflow or Wraparound

*
  • L
Access of Uninitialized Pointer

*
  • H
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • L
NULL Pointer Dereference

*
  • M
Heap-based Buffer Overflow

*
  • M
Improper Certificate Validation

*
  • M
Untrusted Search Path

*
  • H
Out-of-bounds Read

*
  • M
Reversible One-Way Hash

*
  • M
OS Command Injection

*
  • H
Directory Traversal

*
  • M
Arbitrary Argument Injection

*
  • L
Arbitrary Argument Injection

*
  • L
Information Exposure

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • M
Out-of-bounds Read

*
  • M
Directory Traversal

*
  • M
Incorrect Privilege Assignment

*
  • H
Improper Verification of Cryptographic Signature

*
  • M
Buffer Overflow

*
  • L
Heap-based Buffer Overflow

*
  • L
NULL Pointer Dereference

*
  • H
Improper Authentication

*
  • M
Creation of Temporary File With Insecure Permissions

*
  • H
Link Following

*
  • M
Integer Overflow or Wraparound

*
  • H
Stack-based Buffer Overflow

*
  • M
Out-of-bounds Write

*
  • M
Return of Wrong Status Code

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Use of Uninitialized Resource

*
  • M
Improper Neutralization of Null Byte or NUL Character

*
  • L
Improperly Implemented Security Check for Standard

*
  • H
Improper Validation of Syntactic Correctness of Input

*
  • H
Resource Exhaustion

*
  • M
Integer Overflow or Wraparound

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • M
Expired Pointer Dereference

*
  • H
Resource Exhaustion

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • M
Stack-based Buffer Overflow

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Use of Uninitialized Resource

*
  • H
Use After Free

*
  • M
Expired Pointer Dereference

*
  • H
Improper Privilege Management

*
  • H
Resource Exhaustion

*
  • H
Use of Uninitialized Resource

*
  • M
Buffer Overflow

*
  • L
Inefficient Regular Expression Complexity

*
  • M
Reachable Assertion

*
  • H
Improper Input Validation

*
  • L
Stack-based Buffer Overflow

*
  • M
Improper Validation of Integrity Check Value

*
  • H
Out-of-bounds Write

*
  • M
Information Exposure

*
  • M
NULL Pointer Dereference

*
  • H
Resource Exhaustion

*
  • M
Buffer Overflow

*
  • H
Expired Pointer Dereference

*
  • M
Algorithmic Complexity

*
  • L
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-Bounds

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Incorrect Execution-Assigned Permissions

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Integer Overflow or Wraparound

*
  • H
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • M
Processor Optimization Removal or Modification of Security-critical Code

*
  • L
Out-of-bounds Read

*
  • L
Out-of-bounds Read

*
  • M
Improper Check for Unusual or Exceptional Conditions

*
  • L
Unchecked Return Value

*
  • H
Out-of-bounds Write

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • L
Out-of-bounds Write

*
  • H
Race Condition

*
  • M
Double Free

*
  • M
Failure to Sanitize Special Element

*
  • H
Link Following

*
  • M
Directory Traversal

*
  • H
Buffer Overflow

*
  • L
Buffer Access with Incorrect Length Value

*
  • M
Out-of-bounds Read

*
  • L
NULL Pointer Dereference

*
  • L
Out-of-bounds Write

*
  • M
Integer Overflow or Wraparound

*
  • L
Use of Uninitialized Resource

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Incorrect Privilege Assignment

*
  • L
Authentication Bypass by Primary Weakness

*
  • H
Incorrect Privilege Assignment

*
  • H
Reachable Assertion

*
  • H
Improper Privilege Management

*
  • H
Improper Authentication

*
  • M
Improper Handling of Parameters

*
  • H
Symlink Following

*
  • M
Use of Out-of-range Pointer Offset

*
  • M
Out-of-bounds Read

*
  • L
Out-of-Bounds

*
  • M
Improper Synchronization

*
  • M
Insufficiently Protected Credentials

*
  • M
CVE-2024-26602

*
  • H
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Buffer Overflow

*
  • M
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • H
Integer Overflow or Wraparound

*
  • H
Out-of-bounds Write

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
HTTP Request Smuggling

*
  • M
NULL Pointer Dereference

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*