Advisories · Weakness

CWE-472.

Every Advisory and CVE whose sources give the weakness CWE-472, newest first.

CVE-2026-10964 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…
- Google Chrome
- CWE-472
Not analysed yet 4 Jun 2026
CVE-2026-10963 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…
- Google Chrome
- CWE-472
Not analysed yet 4 Jun 2026
CVE-2026-10924 CVE record

CVSS 8.3 High

Google Chrome: Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 4 Jun 2026
CVE-2026-10921 CVE record

CVSS 8.3 High

Google Chrome: Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 4 Jun 2026
CVE-2026-10019 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-10018 CVE record

CVSS 6.5 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-10015 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-10009 CVE record

CVSS 7.5 High

Google Chrome: Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9998 CVE record

CVSS 8.3 High

Google Chrome: Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9968 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9966 CVE record

CVSS 8.3 High

Google Chrome: Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9960 CVE record

CVSS 7.5 High

Google Chrome: Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9911 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9909 CVE record

CVSS 7.5 High

Google Chrome: Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
CVE-2026-9882 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 28 May 2026
org.keycloak:keycloak-services Maven

CVSS 7.1 High

Keycloak: Access token disclosure and implicit flow bypass via forged client data
- CWE-472
<26.6.2 · fixed in 26.6.2

GHSA-hq3p-w4xv-x7vp · CVE-2026-7571 Not analysed yet 19 May 2026
CVE-2026-8577 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8573 CVE record

CVSS 8.3 High

Google Chrome: Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8567 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8559 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in Internationalization in Google Chrome on Windows prior to…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8534 CVE record

CVSS 8.3 High

Google Chrome: Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8532 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8519 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-8510 CVE record

CVSS 7.5 High

Google Chrome: Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 14 May 2026
CVE-2026-7973 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 6 May 2026
CVE-2026-7969 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 6 May 2026
CVE-2026-7942 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 6 May 2026
CVE-2026-7912 CVE record

CVSS 4.2 Medium

Google Chrome: Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 6 May 2026
CVE-2026-7903 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed…
- Google Chrome
- CWE-472
Not analysed yet 6 May 2026
CVE-2026-7896 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 6 May 2026
facturascripts/facturascripts Packagist

CVSS 5.3 Medium

FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field
- Broken access control
- CWE-472
<=2024.92.x-dev · no fixed version yet

GHSA-pp79-hqv6-vmc3 · CVE-2026-32699 Not analysed yet 28 Apr 2026
CVE-2026-7340 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 28 Apr 2026
CVE-2026-4911 CVE record

CVSS 5.3 Medium

Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter
- masaakitanaka Booking Package
- CWE-472
Not analysed yet 28 Apr 2026
CVE-2026-2519 CVE record

CVSS 5.3 Medium

Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'
- ladela Online Scheduling and Appointment Booking System – Bookly
- CWE-472
Not analysed yet 9 Apr 2026
CVE-2026-5912 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 8 Apr 2026
CVE-2026-5910 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 8 Apr 2026
CVE-2026-5909 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 8 Apr 2026
CVE-2026-5908 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 8 Apr 2026
CVE-2026-5870 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 8 Apr 2026
CVE-2026-5859 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 8 Apr 2026
vite npm

CVSS 8.2 High

Vite: `server.fs.deny` bypassed with queries
- Broken access control
- CWE-180
>=7.1.0, <7.3.2 || >=8.0.0, <8.0.5 · fixed in 7.3.2, 8.0.5

GHSA-v2wj-q39q-566r · CVE-2026-39364 Not analysed yet 6 Apr 2026
openclaw npm

CVSS 7.6 High

OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection
- Broken access control
- CWE-472
<2026.3.22 · fixed in 2026.3.22

GHSA-h5hg-h7rr-gpf3 · CVE-2026-41353 Not analysed yet 3 Apr 2026
payload +1 npm

CVSS 9.1 CriticalCritical · CVSS 9+

Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery
- CWE-472
- CWE-640
<3.79.1 · fixed in 3.79.1

GHSA-hp5w-3hxx-vmwf · CVE-2026-34751 Not analysed yet 1 Apr 2026
CVE-2026-5277 CVE record

CVSS 7.5 High

Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 1 Apr 2026
CVE-2026-5274 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 1 Apr 2026
CVE-2026-4679 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 24 Mar 2026
CVE-2026-4464 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 20 Mar 2026
CVE-2026-4453 CVE record

CVSS 4.3 Medium

Google Chrome: Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 20 Mar 2026
CVE-2026-4452 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a…
- Google Chrome
- CWE-472
Not analysed yet 20 Mar 2026
CVE-2026-3914 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 11 Mar 2026
CVE-2026-3538 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote…
- Google Chrome
- CWE-472
Not analysed yet 4 Mar 2026
CVE-2026-3536 CVE record

CVSS 8.8 High

Integer overflow in Google Chrome
- Google Chrome
- Memory corruption
- CWE-472
Not analysed yet 4 Mar 2026
CVE-2026-2649 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker…
- Google Chrome
- CWE-472
Not analysed yet 18 Feb 2026
CVE-2025-14750 CVE record

CVSS 8.7 High

External Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb Service
- Weintek cMT3072XH
- Weintek cMT3072XH(T)
- CWE-472
Not analysed yet 22 Jan 2026
CVE-2025-67846 CVE record

CVSS 4.9 Medium

Mintlify Platform: The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote…
- Mintlify Platform
- CWE-472
Not analysed yet 19 Dec 2025
CVE-2025-66385 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cerebrate: UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged…
- Cerebrate
- CWE-472
Not analysed yet 28 Nov 2025
CVE-2025-10892 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker…
- Google Chrome
- CWE-472
Not analysed yet 24 Sept 2025
CVE-2025-10891 CVE record

CVSS 8.8 High

Google Chrome: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker…
- Google Chrome
- CWE-472
Not analysed yet 24 Sept 2025
CVE-2025-54551 CVE record

CVSS 5.3 Medium

FUJIFILM Healthcare Americas Corporation Synapse Mobility: Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1…
- FUJIFILM Healthcare Americas Corporation Synapse Mobility
- CWE-472
Not analysed yet 20 Aug 2025
CVE-2025-54832 CVE record

CVSS 5.3 Medium

OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification
- OPEXUS FOIAXpress Public Access Link (PAL)
- CWE-472
Not analysed yet 31 Jul 2025