CWE-474 · Input Validation and Logic
Use of Function with Inconsistent Implementations
13CVEs
SortMost likely exploited
13 CVEs with CWE-474 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-0294Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of ServiceJuniper Networks · Junos OS · CVSS 5.3 · 2021-07-15 | 5.3 | 0.9% | 2021-07-15 |
| CVE-2024-1672Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page…Google · Chrome · CVSS 8.8 · 2024-02-21 | 8.8 | 0.9% | 2024-02-21 |
| CVE-2024-2628Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity:…Google · Chrome · CVSS 4.3 · 2024-03-20 | 4.3 | 0.7% | 2024-03-20 |
| CVE-2024-5836Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary cod…Google · Chrome · CVSS 8.8 · 2024-06-11 | 8.8 | 0.5% | 2024-06-11 |
| CVE-2024-7001Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofin…Google · Chrome · CVSS 4.3 · 2024-08-06 | 4.3 | 0.5% | 2024-08-06 |
| CVE-2024-5839Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…Google · Chrome · CVSS 8.8 · 2024-06-11 | 8.8 | 0.5% | 2024-06-11 |
| CVE-2026-24010Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeoverhorilla-opensource · horilla · CVSS 8.8 · 2026-01-22 | 8.8 | 0.5% | 2026-01-22 |
| CVE-2026-11102Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file…Google · Chrome · CVSS 8.8 · 2026-06-04 | 8.8 | 0.4% | 2026-06-04 |
| CVE-2026-0902Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium sec…Google · Chrome · CVSS 8.8 · 2026-01-20 | 8.8 | 0.3% | 2026-01-20 |
| CVE-2026-11097Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s…Google · Chrome · CVSS 6.5 · 2026-06-04 | 6.5 | 0.2% | 2026-06-04 |
| CVE-2024-1694Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium…Google · Omaha · CVSS 7.8 · 2024-06-07 | 7.8 | 0.2% | 2024-06-07 |
| CVE-2026-50719The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and…No vendor recorded · CVSS 6.8 · 2026-08-19 | 6.8 | 0.1% | 2026-08-19 |
| CVE-2026-39894Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formattingCacti · cacti · CVSS 2.9 · 2026-06-24 | 2.9 | 0.1% | 2026-06-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.