CWE-474

CVEs per yearBy the year they were published

1. 20211
2. 20246
3. 20267

Newest CVEs

• CVE-2026-50719

  The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the…

  Product not named

  Medium6.8
• CVE-2026-39894

  Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting

  Cacti · cacti

  Low2.9
• CVE-2026-11102

  Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…

  Google · Chrome

  High8.8
• CVE-2026-11097

  Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted…

  Google · Chrome

  Medium6.5
• CVE-2026-25960

  SSRF Protection Bypass in vLLM

  vllm-project · vllm

  High7.1
• CVE-2026-24010

  Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover

  horilla-opensource · horilla

  High8.8
• CVE-2026-0902

  Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML…

  Google · Chrome

  High8.8
• CVE-2024-7001

  Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures…

  Google · Chrome

  Medium4.3
• CVE-2024-5839

  Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a…

  Google · Chrome

  High8.8
• CVE-2024-5836

  Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to…

  Google · Chrome

  High8.8

Vendors it comes up for most

1. Google9
2. Cacti1
3. Juniper Networks1
4. horilla-opensource1
5. vllm-project1