Intel

Weaknesses

Every published CVE by the weakness its record names: 21 classes and the CWEs in them, with how many are exploited in the wild, the vendors with the most, and the bug bounty reports and payloads of each class.

347,225CVEs with a weakness

809CWEs in use

1,579exploited

59,346with no weakness recorded

21 classes and the CVEs with no weakness recorded

Weakness classes, largest first as the Atlas orders them
Class	CVEs	Exploited	Largest CWEs	Most CVEs	Reports
Cross-site Scripting10 CWEs · 5 payload topics	50,260	33	CWE-79 49,454 CWE-80 663 CWE-87 49 CWE-83 35	IBM, Adobe, Cisco	2,488
Cross-Site Request Forgery2 CWEs · 1 payload topic	9,650	5	CWE-352 9,637 CWE-1275 13	Jenkins, Oracle, Drupal	511
Open Redirect1 CWE · 1 payload topic	1,777	2	CWE-601 1,777	Oracle, LabRedesCefetRJ, Liferay	344
Server-Side Request Forgery2 CWEs · 1 payload topic	4,095	25	CWE-918 3,959 CWE-610 136	GitLab, OpenClaw, WWBN	307
SQL Injection3 CWEs · 4 payload topics	21,866	32	CWE-89 21,713 CWE-943 139 CWE-564 14	SourceCodester, Code-Projects, PHPGurukul	315
Command and Code Injection11 CWEs · 7 payload topics	17,245	240	CWE-78 6,927 CWE-94 5,818 CWE-77 3,181 CWE-88 470	Totolink, Microsoft, D-Link	647
Injection and Smuggling58 CWEs · 10 payload topics	5,039	36	CWE-611 1,363 CWE-74 1,090 CWE-444 441 CWE-116 389	Apache, Jenkins, NETGEAR	267
Deserialization and Object Injection7 CWEs · 5 payload topics	4,376	72	CWE-502 3,542 CWE-1321 589 CWE-915 154 CWE-913 79	ThemeREX, NVIDIA, Fasterxml	54
File and Path Handling50 CWEs · 5 payload topics	23,006	168	CWE-22 10,485 CWE-434 4,345 CWE-59 1,688 CWE-98 1,349	Microsoft, IBM, Dell	297
Memory Corruption66 CWEs	73,454	464	CWE-119 12,236 CWE-787 11,340 CWE-125 10,111 CWE-416 9,607	Microsoft, Linux, Google	846
Race Conditions30 CWEs · 1 payload topic	4,643	20	CWE-362 2,718 CWE-367 911 CWE-667 682 CWE-591 75	Linux, Microsoft, Google	45
Denial of Service39 CWEs · 1 payload topic	16,803	27	CWE-400 3,673 CWE-399 2,619 CWE-770 2,459 CWE-401 1,963	Linux, Cisco, Microsoft	581
Input Validation and Logic115 CWEs · 1 payload topic	18,086	95	CWE-20 12,139 CWE-754 603 CWE-451 496 CWE-755 441	Google, Cisco, Microsoft	574
Misconfiguration and Insecure Design34 CWEs · 10 payload topics	2,494	18	CWE-693 885 CWE-1021 402 CWE-16 297 CWE-1188 286	Google, Mozilla, HCL Software	1,027
Supply Chain and Malicious Code12 CWEs	862	19	CWE-829 314 CWE-494 236 CWE-506 103 CWE-912 98	HackerOne, JetBrains, HCLSoftware	10
Cryptography63 CWEs · 1 payload topic	11,386	25	CWE-310 2,283 CWE-295 1,654 CWE-347 912 CWE-319 881	IBM, Dell, Red Hat	500
Information Disclosure54 CWEs · 4 payload topics	16,868	26	CWE-200 11,425 CWE-532 1,221 CWE-203 689 CWE-209 632	IBM, Microsoft, Google	1,758
Authentication46 CWEs · 4 payload topics	17,423	142	CWE-287 4,507 CWE-306 3,466 CWE-798 1,594 CWE-522 1,215	IBM, Oracle, Cisco	1,151
Access Control79 CWEs	41,747	125	CWE-862 11,120 CWE-284 7,485 CWE-264 5,337 CWE-863 4,226	Oracle, Google, Microsoft	1,347
Insecure Direct Object Reference2 CWEs · 1 payload topic	3,409	1	CWE-639 3,399 CWE-566 10	GitLab, Open-Emr, Nextcloud	359
Other weaknesses125 CWEs · 2 payload topics	2,736	4	CWE-189 1,171 CWE-254 352 CWE-19 226 CWE-17 161	Apple, Google, Linux	70
No weakness recordedNo CWE in the record	59,346	202	CWE-2005 6,155 CWE-2006 5,936 CWE-2026 5,802 CWE-2007 4,227	–	1,721

A CVE's class is the most specific CWE its record names; where the CVE List names none, NVD's analysis is used. “Most CVEs” is among the largest vendors on the map. Data as of 2026-11-14.