VulnSea

CWE-684

CVEs classified under CWE-684, newest first.

6 CVEsRSS

CVE-2026-106361Medium· 6.5
3w ago

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium securit…

▾ Sunlitgoogle · chromeEPSS 0.28%via NVD
CVE-2026-106390Medium· 4.3
3w ago

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

▾ Sunlitgoogle · chromeEPSS 0.20%via NVD
CVE-2026-52735Critical
2mo ago

ZEBRA is a Zcash node written entirely in Rust

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcod…

▾ Midnightzebra-script · zebra-scriptEPSS 0.51%via NVD
CVE-2026-35381Low· 3.3
3mo ago

cut: -s ignored in -z -d '' newline-delimiter mode

cut: -s ignored in -z -d '' newline-delimiter mode

▾ Sunlituu_cut · uu_cutEPSS 0.18%via OSV
CVE-2025-58325High· 8.2
1y ago

An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system comm…

An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system comm…

▾ Twilightfortinet · fortiosEPSS 0.29%via NVD
CVE-2023-5363High· 7.5
3y ago

Incorrect cipher key & IV length processing

Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncati…

▾ TwilightOpenSSL · OpenSSLEPSS 3.9%via CVEORG
CWE-684 vulnerabilities (CVEs) · VulnSea