CWE-691 · Input Validation and Logic
Insufficient Control Flow Management
40CVEs
SortMost likely exploited
40 CVEs with CWE-691 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-0157Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.Intel · Intel(R) Processors · CVSS 6.7 · 2021-11-17 | 6.7 | 3.1% | 2021-11-17 |
| CVE-2022-20697Cisco IOS and IOS XE Software Web Services Denial of Service VulnerabilityCisco · Cisco IOS · CVSS 8.6 · 2022-04-15 | 8.6 | 1.2% | 2022-04-15 |
| CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionbytecodealliance · wasmtime · CVSS 9.9 · 2026-10-23 | 9.9 | 1.0% | 2026-10-23 |
| CVE-2023-5102Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.SICK AG · APU0200 · CVSS 5.3 · 2023-10-09 | 5.3 | 0.8% | 2023-10-09 |
| CVE-2023-20559Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.AMD · Ryzen™ 2000 Series · CVSS 8.8 · 2023-03-23 | 8.8 | 0.7% | 2023-03-23 |
| CVE-2023-44384Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary locationdiscourse · discourse-jira · CVSS 4.1 · 2023-10-06 | 4.1 | 0.5% | 2023-10-06 |
| CVE-2025-49463Zoom Clients for iOS - Insufficient Control Flow ManagementZoom Communications Inc. · Zoom Clients for iOS · CVSS 6.5 · 2025-07-10 | 6.5 | 0.5% | 2025-07-10 |
| CVE-2025-47774Vyper's `slice()` may elide side-effects when output length is 0vyperlang · vyper · CVSS 2.9 · 2025-05-15 | 2.9 | 0.5% | 2025-05-15 |
| CVE-2026-20276Cisco IOS XR Software Security Hardening Release: September 2026Cisco · Cisco IOS XR Software · CVSS 8.6 · 2026-09-02 | 8.6 | 0.5% | 2026-09-02 |
| CVE-2026-20271Cisco IOS XE Software Security Hardening ReleaseCisco · Cisco IOS XE Software · CVSS 8.6 · 2026-08-05 | 8.6 | 0.5% | 2026-08-05 |
| CVE-2025-47285Vyper's `concat()` builtin may elide side-effects for zero-length argumentsvyperlang · vyper · CVSS 2.9 · 2025-05-15 | 2.9 | 0.5% | 2025-05-15 |
| CVE-2025-51675An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter (PC) values when SPR changes can lead to a Denial of Service (DoS).No vendor recorded · CVSS 7.5 · 2026-08-26 | 7.5 | 0.5% | 2026-08-26 |
| CVE-2024-33617Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.Intel(R) QAT Engine for OpenSSL software · CVSS 5.9 · 2024-11-13 | 5.9 | 0.5% | 2024-11-13 |
| CVE-2024-37158Evmos is missing precompile checksevmos · evmos · CVSS 3.5 · 2024-06-17 | 3.5 | 0.4% | 2024-06-17 |
| CVE-2025-25774An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an exception in the AMF's internal sta…Open5gs · Open5gs · CVSS 6.5 · 2025-03-12 | 6.5 | 0.4% | 2025-03-12 |
| CVE-2026-79033Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary c…Google · Chrome · CVSS 8.8 · 2026-08-25 | 8.8 | 0.4% | 2026-08-25 |
| CVE-2020-12359Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical acce…Intel · Intel(R) Processors · CVSS 6.8 · 2021-06-09 | 6.8 | 0.3% | 2021-06-09 |
| CVE-2022-46828In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.JetBrains · IntelliJ IDEA · CVSS 5.2 · 2022-12-08 | 5.2 | 0.3% | 2022-12-08 |
| CVE-2021-4106Vulnerability in Snow Inventory Java ScannerSNOW · Snow Inventory Java Scanner · CVSS 7.8 · 2022-02-16 | 7.8 | 0.3% | 2022-02-16 |
| CVE-2025-20022Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform · CVSS 5.7 · 2025-05-13 | 5.7 | 0.2% | 2025-05-13 |
| CVE-2022-46299Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.Intel · Intel Unison software · CVSS 3.3 · 2023-11-14 | 3.3 | 0.2% | 2023-11-14 |
| CVE-2022-48481In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possibleJetBrains · Toolbox App · CVSS 5.2 · 2023-04-28 | 5.2 | 0.2% | 2023-04-28 |
| CVE-2024-29079Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially enable escalation of privilege via loc…Intel · Intel(R) VROC software · CVSS 6.8 · 2024-11-13 | 6.8 | 0.2% | 2024-11-13 |
| CVE-2025-35963Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service.…Intel(R) PROSet/Wireless WiFi Software for Windows · CVSS 7.4 · 2025-11-11 | 7.4 | 0.2% | 2025-11-11 |
| CVE-2021-33157Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially ena…Intel · Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability… · CVSS 7.2 · 2024-05-16 | 7.2 | 0.2% | 2024-05-16 |
| CVE-2024-21801Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via loca…Intel · Intel(R) TDX module software · CVSS 7.1 · 2024-08-14 | 7.1 | 0.2% | 2024-08-14 |
| CVE-2023-24587Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access.Intel · Intel(R) Optane(TM) SSD products · CVSS 6.9 · 2023-11-14 | 6.9 | 0.2% | 2023-11-14 |
| CVE-2024-25565Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via local access.Intel(R) Xeon(R) Processors · CVSS 3.8 · 2024-11-13 | 3.8 | 0.2% | 2024-11-13 |
| CVE-2023-28711Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable denial of service v…Intel · Hyperscan Library maintained by Intel(R) · CVSS 5.5 · 2023-08-11 | 5.5 | 0.2% | 2023-08-11 |
| CVE-2022-37409Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure…Intel · Intel(R) IPP Cryptography software · CVSS 4.7 · 2023-05-10 | 4.7 | 0.2% | 2023-05-10 |
| CVE-2022-43505Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.Intel · Intel(R) Processors · CVSS 4.1 · 2023-08-11 | 4.1 | 0.2% | 2023-08-11 |
| CVE-2022-41646Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure…Intel · Intel(R) IPP Cryptography software · CVSS 4.7 · 2023-05-10 | 4.7 | 0.2% | 2023-05-10 |
| CVE-2025-24305Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable es…Intel(R) Xeon(R) processors · CVSS 7.2 · 2025-08-12 | 7.2 | 0.2% | 2025-08-12 |
| CVE-2024-22374Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access.Intel(R) Xeon Processors · CVSS 6.5 · 2024-08-14 | 6.5 | 0.2% | 2024-08-14 |
| CVE-2026-76469Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management VulnerabilitiesCisco · Cisco Campus Gateway Software · CVSS 7.4 · 2026-10-07 | 7.4 | 0.2% | 2026-10-07 |
| CVE-2025-20004Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow a privileged user to potentially enable…Intel(R) Xeon(R) 6 processor E-Cores firmware · CVSS 7.2 · 2025-05-13 | 7.2 | 0.2% | 2025-05-13 |
| CVE-2025-25273Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially ena…Intel(R) 700 Series Ethernet · CVSS 7.8 · 2025-08-12 | 7.8 | 0.1% | 2025-08-12 |
| CVE-2025-22893Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially ena…Intel(R) 800 Series Ethernet · CVSS 7.8 · 2025-08-12 | 7.8 | 0.1% | 2025-08-12 |
| CVE-2026-5938Foxit PDF Editor/Reader Infinite Loop Denial-of-Service VulnerabilityFoxit Software Inc. · Foxit PDF Editor · CVSS 5.5 · 2026-04-27 | 5.5 | 0.1% | 2026-04-27 |
| CVE-2026-59636In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature anti-rollback fuse updates due to a logic er…Google · Android · CVSS 6.2 · 2026-11-10 | 6.2 | 0.1% | 2026-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.