# CWE-472.

Every Advisory and CVE whose sources give the weakness CWE-472, newest first.

## Records, newest first (an older page)

- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-10964.md)
  `CVE-2026-10964` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-10963.md)
  `CVE-2026-10963` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10924.md)
  `CVE-2026-10924` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10921.md)
  `CVE-2026-10921` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10019.md)
  `CVE-2026-10019` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10018.md)
  `CVE-2026-10018` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10015.md)
  `CVE-2026-10015` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10009.md)
  `CVE-2026-10009` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-9998.md)
  `CVE-2026-9998` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-9968.md)
  `CVE-2026-9968` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a…](https://agentprime.io/advisories/CVE-2026-9966.md)
  `CVE-2026-9966` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-9960.md)
  `CVE-2026-9960` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-9911.md)
  `CVE-2026-9911` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-9909.md)
  `CVE-2026-9909` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…](https://agentprime.io/advisories/CVE-2026-9882.md)
  `CVE-2026-9882` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 28 May 2026 · Tags: CWE-472
- [Keycloak: Access token disclosure and implicit flow bypass via forged client data](https://agentprime.io/advisories/GHSA-hq3p-w4xv-x7vp.md)
  `GHSA-hq3p-w4xv-x7vp`, `BIT-keycloak-2026-7571`, `CVE-2026-7571` · Maven `org.keycloak:keycloak-services`: affected `<26.6.2`, fixed in `26.6.2` · CVSS 7.1 High · Not analysed yet · Published 19 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote…](https://agentprime.io/advisories/CVE-2026-8577.md)
  `CVE-2026-8577` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a…](https://agentprime.io/advisories/CVE-2026-8573.md)
  `CVE-2026-8573` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a…](https://agentprime.io/advisories/CVE-2026-8567.md)
  `CVE-2026-8567` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Internationalization in Google Chrome on Windows prior to…](https://agentprime.io/advisories/CVE-2026-8559.md)
  `CVE-2026-8559` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168…](https://agentprime.io/advisories/CVE-2026-8534.md)
  `CVE-2026-8534` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote…](https://agentprime.io/advisories/CVE-2026-8532.md)
  `CVE-2026-8532` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a…](https://agentprime.io/advisories/CVE-2026-8519.md)
  `CVE-2026-8519` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a…](https://agentprime.io/advisories/CVE-2026-8510.md)
  `CVE-2026-8510` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a…](https://agentprime.io/advisories/CVE-2026-7973.md)
  `CVE-2026-7973` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote…](https://agentprime.io/advisories/CVE-2026-7969.md)
  `CVE-2026-7969` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote…](https://agentprime.io/advisories/CVE-2026-7942.md)
  `CVE-2026-7942` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a…](https://agentprime.io/advisories/CVE-2026-7912.md)
  `CVE-2026-7912` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed…](https://agentprime.io/advisories/CVE-2026-7903.md)
  `CVE-2026-7903` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote…](https://agentprime.io/advisories/CVE-2026-7896.md)
  `CVE-2026-7896` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-472
- [FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field](https://agentprime.io/advisories/GHSA-pp79-hqv6-vmc3.md)
  `GHSA-pp79-hqv6-vmc3`, `CVE-2026-32699`, `PKSA-8tbv-2p1s-9wnk` · Packagist `facturascripts/facturascripts`: affected `<=2024.92.x-dev`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Broken access control, CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a…](https://agentprime.io/advisories/CVE-2026-7340.md)
  `CVE-2026-7340` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-472
- [Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter](https://agentprime.io/advisories/CVE-2026-4911.md)
  `CVE-2026-4911` · CVE record: masaakitanaka Booking Package · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-472
- [Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'](https://agentprime.io/advisories/CVE-2026-2519.md)
  `CVE-2026-2519` · CVE record: ladela Online Scheduling and Appointment Booking System – Bookly · CVSS 5.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5912.md)
  `CVE-2026-5912` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5910.md)
  `CVE-2026-5910` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5909.md)
  `CVE-2026-5909` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5908.md)
  `CVE-2026-5908` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5870.md)
  `CVE-2026-5870` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5859.md)
  `CVE-2026-5859` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-472
- [Vite: \`server.fs.deny\` bypassed with queries](https://agentprime.io/advisories/GHSA-v2wj-q39q-566r.md)
  `GHSA-v2wj-q39q-566r`, `CVE-2026-39364` · npm `vite`: affected `>=7.1.0, <7.3.2 || >=8.0.0, <8.0.5`, fixed in `7.3.2`, `8.0.5` · CVSS 8.2 High · Not analysed yet · Published 6 Apr 2026 · Tags: Broken access control, CWE-180, CWE-472
- [OpenClaw: Node browser proxy \`allowProfiles\` bypass through persistent profile mutation and runtime profile selection](https://agentprime.io/advisories/GHSA-h5hg-h7rr-gpf3.md)
  `GHSA-h5hg-h7rr-gpf3`, `CVE-2026-41353` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 7.6 High · Not analysed yet · Published 3 Apr 2026 · Tags: Broken access control, CWE-472
- [Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery](https://agentprime.io/advisories/GHSA-hp5w-3hxx-vmwf.md)
  `GHSA-hp5w-3hxx-vmwf`, `CVE-2026-34751` · npm `payload` and 1 more: affected `<3.79.1`, fixed in `3.79.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-472, CWE-640
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a…](https://agentprime.io/advisories/CVE-2026-5277.md)
  `CVE-2026-5277` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote…](https://agentprime.io/advisories/CVE-2026-5274.md)
  `CVE-2026-5274` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote…](https://agentprime.io/advisories/CVE-2026-4679.md)
  `CVE-2026-4679` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote…](https://agentprime.io/advisories/CVE-2026-4464.md)
  `CVE-2026-4464` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote…](https://agentprime.io/advisories/CVE-2026-4453.md)
  `CVE-2026-4453` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a…](https://agentprime.io/advisories/CVE-2026-4452.md)
  `CVE-2026-4452` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote…](https://agentprime.io/advisories/CVE-2026-3914.md)
  `CVE-2026-3914` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote…](https://agentprime.io/advisories/CVE-2026-3538.md)
  `CVE-2026-3538` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-472
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-3536.md)
  `CVE-2026-3536` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Mar 2026 · Tags: Memory corruption, CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-2649.md)
  `CVE-2026-2649` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-472
- [External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service](https://agentprime.io/advisories/CVE-2025-14750.md)
  `CVE-2025-14750` · CVE record: Weintek cMT3072XH and 3 more · CVSS 8.7 High · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-472
- [Mintlify Platform: The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote…](https://agentprime.io/advisories/CVE-2025-67846.md)
  `CVE-2025-67846` · CVE record: Mintlify Mintlify Platform · CVSS 4.9 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: CWE-472
- [Cerebrate: UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged…](https://agentprime.io/advisories/CVE-2025-66385.md)
  `CVE-2025-66385` · CVE record: cerebrate-project Cerebrate · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2025-10892.md)
  `CVE-2025-10892` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2025-10891.md)
  `CVE-2025-10891` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-472
- [FUJIFILM Healthcare Americas Corporation Synapse Mobility: Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1…](https://agentprime.io/advisories/CVE-2025-54551.md)
  `CVE-2025-54551` · CVE record: FUJIFILM Healthcare Americas Corporation Synapse Mobility · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: CWE-472
- [OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification](https://agentprime.io/advisories/CVE-2025-54832.md)
  `CVE-2025-54832` · CVE record: OPEXUS FOIAXpress Public Access Link (PAL) · CVSS 5.3 Medium · Not analysed yet · Published 31 Jul 2025 · Tags: CWE-472

Newest: <https://agentprime.io/advisories/tag/cwe-472.md>
Older: <https://agentprime.io/advisories/tag/cwe-472.md?cursor=WyIyMDI1LTA3LTMxVDE3OjI1OjI3LjI3MjAwMFoiLCJDVkUtMjAyNS01NDgzMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-472&cursor=WyIyMDI2LTA2LTA0VDIzOjAzOjU4LjkxNTAwMFoiLCJDVkUtMjAyNi0xMDk2NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-472/?cursor=WyIyMDI2LTA2LTA0VDIzOjAzOjU4LjkxNTAwMFoiLCJDVkUtMjAyNi0xMDk2NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.