Skip to content
Noroxi

CWE-691 · 40 records

Insufficient Control Flow Management

CVEs in this class

40 records

  • CVE-2026-43503
    40Plan

    net: skbuff: propagate shared-frag marker through frag-transfer helpers

    HighCVSS 8.8WeaponizedEPSS 1%

    linux · linux kernelMay 23, 2026

  • CVE-2026-115893
    39Monitor

    Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

    CriticalCVSS 9.9No exploitEPSS 0%

    bytecodealliance · wasmtime3 days ago

  • CVE-2023-20559
    35Monitor

    Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially lead

    HighCVSS 8.8No exploitEPSS 0%

    amd · ryzen 7 5700g firmwareApr 2, 2023

  • CVE-2026-79033
    35Monitor

    Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social enginee

    HighCVSS 8.8No exploitEPSS 0%

    google · chromeAug 25, 2026

  • CVE-2025-25273
    35Monitor

    Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow a

    HighCVSS 8.8No exploitEPSS 0%

    Aug 12, 2025

  • CVE-2025-22893
    35Monitor

    Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow a

    HighCVSS 8.8No exploitEPSS 0%

    Aug 12, 2025

  • CVE-2022-20697
    34Monitor

    Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · iosApr 15, 2022

  • CVE-2026-20276
    34Monitor

    Cisco IOS XR Software Security Hardening Release: September 2026

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xrSep 2, 2026

  • CVE-2026-20271
    34Monitor

    Cisco IOS XE Software Security Hardening Release

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2025-20004
    34Monitor

    Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow a

    HighCVSS 8.5No exploitEPSS 0%

    May 13, 2025

  • CVE-2025-35963
    33Monitor

    Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device

    HighCVSS 8.3No exploitEPSS 0%

    Nov 11, 2025

  • CVE-2024-21801
    33Monitor

    Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potent

    HighCVSS 8.3No exploitEPSS 0%

    intel · tdx moduleAug 14, 2024

  • CVE-2024-33617
    32Monitor

    Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure

    HighCVSS 8.2No exploitEPSS 0%

    Nov 13, 2024

  • CVE-2024-37158
    32Monitor

    Evmos is missing precompile checks

    HighCVSS 8.1No exploitEPSS 0%

    evmos · evmosJun 17, 2024

  • CVE-2022-46828
    31Monitor

    In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.

    HighCVSS 7.8No exploitEPSS 0%

    jetbrains · intellij ideaDec 8, 2022

  • CVE-2021-4106
    31Monitor

    Vulnerability in Snow Inventory Java Scanner

    HighCVSS 7.8No exploitEPSS 0%

    snowsoftware · snow inventory java scannerFeb 16, 2022

  • CVE-2022-48481
    31Monitor

    In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible

    HighCVSS 7.8No exploitEPSS 0%

    jetbrains · toolboxApr 28, 2023

  • CVE-2025-51675
    30Monitor

    An issue was discovered in openRISC OR1200 commit 83ac6b.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-76469
    29Monitor

    Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management Vulnerabilities

    HighCVSS 7.4No exploitEPSS 0%

    cisco · cisco campus gateway softwareOct 7, 2026

  • CVE-2021-33157
    28Monitor

    Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may all

    HighCVSS 7.2No exploitEPSS 0%

    intel · ethernet controller i225-it firmwareFeb 23, 2024

  • CVE-2025-24305
    28Monitor

    Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a p

    HighCVSS 7.0No exploitEPSS 0%

    Aug 12, 2025

  • CVE-2021-0157
    27Monitor

    Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esc

    MediumCVSS 6.7No exploitEPSS 3%

    intel · celeron n2805Nov 17, 2021

  • CVE-2020-12359
    27Monitor

    Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable es

    MediumCVSS 6.8No exploitEPSS 0%

    intel · biosJun 9, 2021

  • CVE-2024-29079
    27Monitor

    Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially

    MediumCVSS 6.9No exploitEPSS 0%

    intel · virtual raid on cpuNov 13, 2024

  • CVE-2024-22374
    27Monitor

    Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of servi

    MediumCVSS 6.8No exploitEPSS 0%

    Aug 14, 2024

All vulnerability classes