By weakness (CWE)

CWE-824: related vulnerabilities

CVEs classified under CWE-824. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

3 published vulnerabilities

• CVE-2026-47908HIGH 7.8

  Adobe Dreamweaver Desktop versions 21.7 and earlier contain a memory safety defect that could allow attackers to execute arbitrary code on a victim's computer. The vulnerability is triggered when a user opens a specially crafted file, making it a user-interaction-dependent attack. The flaw affects Windows and macOS systems running vulnerable Dreamweaver versions.

• CVE-2026-47320MEDIUM 6.1

  CVE-2026-47320 is a memory safety vulnerability in Samsung's rlottie animation library that combines two distinct weaknesses: uninitialized pointer access and uncontrolled recursion. An attacker can craft malicious animation files that trigger pointer manipulation or send oversized serialized payloads, leading to application crashes and potential data corruption. The vulnerability requires local access and user interaction to exploit—someone must open a specially crafted file. While not as critical as remote execution flaws, this defect threatens availability and integrity on systems that process untrusted animation content.

• CVE-2026-53042MEDIUM 5.5

  A flaw in the Linux kernel's fwctl subsystem can cause the system to crash when removing certain devices. The issue stems from a module initialization ordering problem: the CXL driver loads before fwctl and tries to register devices before fwctl is ready, leaving internal data structures uninitialized. When those devices are later removed, the kernel attempts to clean up the uninitialized structures, triggering a crash. This affects systems using Compute Express Link (CXL) devices.