CWE-474
14 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 14Published CVEs14 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-50719
The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the…
Product not named
Medium6.8 - CVE-2026-39894
Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting
Cacti · cacti
Low2.9 - CVE-2026-11102
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…
Google · Chrome
High8.8 - CVE-2026-11097
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted…
Google · Chrome
Medium6.5 - CVE-2026-25960
SSRF Protection Bypass in vLLM
vllm-project · vllm
High7.1 - CVE-2026-24010
Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover
horilla-opensource · horilla
High8.8 - CVE-2026-0902
Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML…
Google · Chrome
High8.8 - CVE-2024-7001
Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures…
Google · Chrome
Medium4.3 - CVE-2024-5839
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a…
Google · Chrome
High8.8 - CVE-2024-5836
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to…
Google · Chrome
High8.8