TYPE DE FAIBLESSE

CWE-691

19 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-691 (en anglais) →

CVE-2026-5938Les logiciels qui traitent les chaînes d'actions de documents sont affectés par une faille pouvant figer l'interface utilisateur, entraînant ainsi un déni de service. Un attaquant … 5.5 MOYENNE

CVE-2025-49463Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network acces… 6.5 MOYENNE

CVE-2025-20022Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure … 5.8 MOYENNE

CVE-2025-25774An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an exception in the AMF's internal stat… 6.5 MOYENNE

CVE-2024-29079Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially enable escalation of privilege via loca… 6.9 MOYENNE

CVE-2024-25565Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via local access. 4.8 MOYENNE

CVE-2024-22374Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access. 6.8 MOYENNE

CVE-2024-3847Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium secu… 6.1 MOYENNE

CVE-2023-24587Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access. 6.9 MOYENNE

CVE-2023-5102 Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests. 5.3 MOYENNE

CVE-2023-44384Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administrator user can make an SSRF attack by sett… 4.1 MOYENNE

CVE-2023-28711Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable denial of service vi… 5.5 MOYENNE

CVE-2022-43505Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. 4.1 MOYENNE

CVE-2022-41646Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure … 4.7 MOYENNE

CVE-2022-37409Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure v… 4.7 MOYENNE

CVE-2022-48481In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible 5.2 MOYENNE

CVE-2022-46828In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible. 5.2 MOYENNE

CVE-2021-0157Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. 6.7 MOYENNE

CVE-2020-12359Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical acces… 6.8 MOYENNE