CWE-691: Insufficient Control Flow Management
The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.
From the CWE List. © The MITRE Corporation.
Newest
- bytecodealliance wasmtime Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction 9.9 Critical
- cisco campus gateway software, meraki mr wireless access points software, meraki mv firmware +1 more +3 more Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management Vulnerabilities 7.4 High
- vyperlang vyper Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops 6.3 Medium
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Security Hardening Release: September 2026 8.6 High
- No product listed An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter... 7.5 High
- google chrome Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed... 8.8 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software Security Hardening Release 8.6 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 more net: skbuff: propagate shared-frag marker through frag-transfer helpers 8.8 High
- foxit pdf editor, pdf reader +1 more Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability 5.5 Medium
- No product listed Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows... 8.3 High
- No product listed Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series... 8.8 High
-
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +1 more +3 more Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for... 7.0 High - No product listed Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series... 8.8 High
- zoom, zoom communications inc. clients for ios +1 more Zoom Clients for iOS - Insufficient Control Flow Management 6.5 Medium
- vyperlang vyper Vyper's `slice()` may elide side-effects when output length is 0 2.9 Low
- vyperlang vyper Vyper's `concat()` builtin may elide side-effects for zero-length arguments 2.9 Low
- No product listed Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge... 5.8 Medium
- No product listed Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon... 8.5 High
- open5gs An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a... 6.5 Medium
-
qatengineopenSUSE,qatlibopenSUSE,qatzipSUSE +2 more Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before... 8.2 High - intel vroc software, virtual raid on cpu +1 more Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may... 6.9 Medium
- No product listed Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may... 4.8 Medium
- intel tdx module Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05... 8.3 High
- No product listed Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated... 6.8 Medium
- evmos Evmos is missing create validator check 3.5 Low
- evmos Evmos is missing precompile checks 3.5 Low
- evmos evmos allows transferring unvested tokens after delegations 3.5 Low
- google chrome, fedoraproject fedora +1 more Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote... 6.1 Medium
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +1 more +3 more Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of pri… 7.2 High
- checkmk Disabled automation users could still authenticate 8.8 High
- zoom, zoom communications inc. clients, zoom meetings +1 more +3 more Insufficient control flow management in some Zoom clients may allow an authenticated user to... 3.5 Low
- intel optane memory h20 with solid state storage firmware, optane ssd 900p firmware, optane ssd 905p firmware +2 more +4 more Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may... 6.9 Medium
- intel unison software Insufficient control flow management for some Intel Unison software may allow an authenticated... 3.3 Low
- sick apu0200, apu0200 firmware +1 more Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote... 5.3 Medium
- discourse discourse-jira, jira +1 more Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location 4.1 Medium
- intel hyperscan library Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before... 5.5 Medium
- intel atom c3308 firmware, atom c3336 firmware, atom c3338 firmware +903 more +905 more Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow... 4.1 Medium
- intel integrated performance primitives cryptography Insufficient control flow management in the Intel(R) IPP Cryptography software before version... 4.7 Medium
- intel integrated performance primitives cryptography Insufficient control flow management for the Intel(R) IPP Cryptography software before version... 4.7 Medium
- jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible 5.2 Medium
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 more Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to... 8.8 High
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible. 5.2 Medium
- cisco ios, ios xe +1 more Cisco IOS and IOS XE Software Web Services Denial of Service Vulnerability 8.6 High
- snow inventory java scanner, snowsoftware snow inventory java scanner +1 more Vulnerability in Snow Inventory Java Scanner 7.8 High
- intel celeron n2805, celeron n2806, celeron n2807 +481 more +483 more Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow... 6.7 Medium
- intel bios, netapp aff bios, cloud backup +5 more +7 more Insufficient control flow management in the firmware for some Intel(R) Processors may allow an... 6.8 Medium