Advisories · Weakness

CWE-474.

Every Advisory and CVE whose sources give the weakness CWE-474, newest first.

CVE-2026-50719 CVE record

CVSS 6.8 Medium

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking sig…
- Broken access control
- Weak cryptography or TLS
Not analysed yet 19 Aug 2026
CVE-2026-39894 CVE record

CVSS 2.9 Low

Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting
- cacti
- CWE-474
Not analysed yet 24 Jun 2026
CVE-2026-11102 CVE record

CVSS 8.8 High

Google Chrome: Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53…
- Google Chrome
- CWE-474
Not analysed yet 4 Jun 2026
CVE-2026-11097 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in WebView in Google Chrome on Android prior to…
- Google Chrome
- CWE-474
Not analysed yet 4 Jun 2026
vllm PyPI

CVSS 7.1 High

vLLM has SSRF Protection Bypass
- Server-side request forgery (SSRF)
- CWE-474
>=0.15.1, <0.17.0 · fixed in 0.17.0

GHSA-v359-jj2v-j536 · CVE-2026-25960 Not analysed yet 9 Mar 2026
CVE-2026-24010 CVE record

CVSS 8.8 High

Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover
- horilla
- Other injection
- CWE-474
Not analysed yet 22 Jan 2026
CVE-2026-0902 CVE record

CVSS 8.8 High

Google Chrome: Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a…
- Google Chrome
- CWE-474
Not analysed yet 20 Jan 2026
CVE-2024-7001 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a…
- Google Chrome
- CWE-474
Not analysed yet 6 Aug 2024
CVE-2024-5839 CVE record

CVSS 8.8 High

Google Chrome: Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54…
- Google Chrome
- CWE-474
Not analysed yet 11 Jun 2024
CVE-2024-5836 CVE record

CVSS 8.8 High

Google Chrome: Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed…
- Google Chrome
- CWE-474
Not analysed yet 11 Jun 2024
CVE-2024-1694 CVE record

CVSS 7.8 High

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file.
- Google Omaha
- CWE-474
Not analysed yet 7 Jun 2024
CVE-2024-2628 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed…
- Google Chrome
- CWE-474
Not analysed yet 20 Mar 2024
CVE-2024-1672 CVE record

CVSS 8.8 High

Google Chrome: Inappropriate implementation in Content Security Policy in Google Chrome prior to…
- Google Chrome
- CWE-474
Not analysed yet 21 Feb 2024
CVE-2021-0294 CVE record

CVSS 5.3 Medium

Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service
- Juniper Networks Junos OS
- CWE-474
Not analysed yet 15 Jul 2021