CWE-706: Use of Incorrectly-Resolved Name or Reference
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a... 9.6 Critical
- google chrome Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38... 8.1 High
- mongodb database tools mongorestore may bypass collection guards through a system.buckets prefix 5.2 Medium
- trailofbits fickling Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis 8.8 High
- google chrome Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a... 8.8 High
- google chrome Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to... 8.8 High
- google chrome Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a... 9.6 Critical
- google chrome Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a... 8.8 High
- eclipse foundation keypont - gose JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil 6.3 Medium
- vyperlang vyper Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments 8.6 High
- gitlab Use of Incorrectly-Resolved Name or Reference in GitLab 3.1 Low
- google chrome Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 6.5 Medium
- google chrome Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote... 6.5 Medium
- google chrome Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote... 6.5 Medium
- google chrome Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- tox-dev filelock filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path 6.1 Medium
- error311 filerise FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation 7.1 High
- google chrome Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79... 8.3 High
- otrs ag ((otrs)) community edition, otrs +1 more Duplicate Identity / Identity Shadowing across CustomerUser backends 5.4 Medium
- devolutions server, mariadb +1 more MariaDB: database privilege escalation via user / role name collision in the acl cache 6.4 Medium
- devolutions server, mariadb +1 more MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 9.9 Critical
- gitea Gitea review and execution mismatch through duplicate tree entries 9.1 Critical
- google chrome Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote... 4.3 Medium
- google chrome Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059... 8.3 High
- google chrome Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39... 5.3 Medium
- google chrome Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39... 7.4 High
- google chrome Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39... 8.8 High
- google chrome Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a... 5.3 Medium
- google chrome Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39... 8.8 High
- google chrome Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a... 8.3 High
- google chrome Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a... 6.5 Medium
- gerrit Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review 7.6 High
- No product listed Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone 8.8 High
- notepad-plus-plus Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution) 7.8 High
- google chrome Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52... 8.1 High
- patriksimek vm2 vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver 9.4 Critical
- google chrome Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47... 8.1 High
- No product listed OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload(... 2.7 Low
- No product listed An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which... 2.7 Low
- google chrome Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36... 8.3 High
- google chrome Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36... 4.3 Medium
- google chrome Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a... 9.0 Critical
- google chrome Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a... 9.6 Critical
- microsoft visual studio code Visual Studio Code Information Disclosure Vulnerability 7.4 High
- google chrome Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977... 4.3 Medium
- google chrome Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65... 4.3 Medium
- google chrome Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote... 3.1 Low
- google chrome Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote... 4.3 Medium
- google chrome Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a... 4.3 Medium
- Show olderLoading…