Insufficient Control Flow Management
CWE-691
The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.
We track 16 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
Latest Insufficient Control Flow Management vulnerabilities
- 9.9 Critical severity
wasmtime: Insufficient Control Flow Management
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. T
- 7.4 High severity
Cisco Campus Gateway Software: Insufficient Control Flow Management
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internall
- 8.6 High severity
Cisco IOS XR Software: Insufficient Control Flow Management
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple inte
- 8.8 High severity
Chrome: Insufficient Control Flow Management
Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medi
- 8.6 High severity
Cisco IOS XE Software: Insufficient Control Flow Management
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple intern
- 8.8 High severity
Linux: Insufficient Control Flow Management
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shin
- 7.4 High severity
Intel(R) PROSet/Wireless WiFi Software for…: Insufficient Control Flow Management
Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low
- 7.8 High severity
Intel(R) 700 Series Ethernet: Insufficient Control Flow Management
Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.2 High severity
Intel(R) Xeon(R) processors: Insufficient Control Flow Management
Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
- 7.8 High severity
Intel(R) 800 Series Ethernet: Insufficient Control Flow Management
Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.2 High severity
Intel(R) Xeon(R) 6 processor E-Cores firmware: Insufficient Control Flow Management
Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access.
- 7.8 High severity
Intel(R) VROC software: Insufficient Control Flow Management
Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.1 High severity
Intel(R) TDX module software: Insufficient Control Flow Management
Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.
- 8.1 High severity
evmos: Insufficient Control Flow Management
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Preliminary checks on actions computed by the clawback vesting accounts are performed in the ante handler. Evmos core, implements two different ante handlers: one for Cosmos transactions an
- 8.8 High severity
Ryzen™ 2000 Series: Insufficient Control Flow Management
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
- 8.6 High severity
Cisco IOS: Missing Release of Resource after Effective Lifetime
A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP serv