CWE-705 · Input Validation and Logic
Incorrect Control Flow Scoping
5CVEs
SortMost likely exploited
5 CVEs with CWE-705 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-45433OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of…Opensynergy · Blue Sdk · CVSS 6.5 · 2025-09-12 | 6.5 | 0.5% | 2025-09-12 |
| CVE-2026-45819baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, caus…web-platform-dx · baseline-browser-mapping · CVSS 6.6 · 2026-08-13 | 6.6 | 0.5% | 2026-08-13 |
| CVE-2026-40208Denial of service via DoH3 queriesPowerDNS · DNSdist · CVSS 3.7 · 2026-06-25 | 3.7 | 0.4% | 2026-06-25 |
| CVE-2025-53856TMM vulnerabilityF5 · BIG-IP · CVSS 7.5 · 2025-10-15 | 7.5 | 0.3% | 2025-10-15 |
| CVE-2026-3449Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains i…@tootallnate/once · CVSS 3.3 · 2026-03-03 | 3.3 | 0.1% | 2026-03-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.