CWE-754

Medium likelihood

Improper Check for Unusual or Exceptional Conditions

Parent: CWE-703 - Improper Check or Handling of Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

588 vulnerabilities with CWE-754
CVE-2026-20719 MEDIUM
DoS via URL Previews Rendering Malicious SVGs
CVSS 4.3
CVE-2026-4719 HIGH
Incorrect boundary conditions in the Graphics: Text component
CVSS 7.5
CVE-2026-4714 HIGH
Incorrect boundary conditions in the Audio/Video component
CVSS 7.5
CVE-2026-4713 HIGH
Incorrect boundary conditions in the Graphics component
CVSS 7.5
CVE-2026-4709 HIGH
Incorrect boundary conditions in the Audio/Video: GMP component
CVSS 7.5
CVE-2026-4708 HIGH
Incorrect boundary conditions in the Graphics component
CVSS 7.5
CVE-2026-4707 HIGH
Incorrect boundary conditions in the Graphics: Canvas2D component
CVSS 7.5
CVE-2026-4706 HIGH
Incorrect boundary conditions in the Graphics: Canvas2D component
CVSS 7.5
CVE-2026-4699 HIGH
Incorrect boundary conditions in the Layout: Text and Fonts component
CVSS 7.5
CVE-2026-4697 HIGH
Incorrect boundary conditions in the Audio/Video: Web Codecs component
CVSS 7.5
CVE-2026-4695 HIGH
Incorrect boundary conditions in the Audio/Video: Web Codecs component
CVSS 7.5
CVE-2026-4694 HIGH
Incorrect boundary conditions, integer overflow in the Graphics component
CVSS 7.5
CVE-2026-4693 HIGH
Incorrect boundary conditions in the Audio/Video: Playback component
CVSS 7.5
CVE-2026-4690 HIGH
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
CVSS 8.6
CVE-2026-4689 CRITICAL
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
CVSS 10.0
CVE-2026-4687 HIGH
Sandbox escape due to incorrect boundary conditions in the Telemetry component
CVSS 8.6
CVE-2026-4686 HIGH
Incorrect boundary conditions in the Graphics: Canvas2D component
CVSS 7.5
CVE-2026-4685 HIGH
Incorrect boundary conditions in the Graphics: Canvas2D component
CVSS 7.5
CVE-2026-33151 HIGH
socket.io allows an unbounded number of binary attachments
CVSS 7.5
CVE-2026-0230 MEDIUM
Palo Alto Cortex XDR macOS - Privilege Escalation
CVE-2026-30900 HIGH
Zoom Client for Windows - Privilege Escalation
CVSS 7.8
CVE-2026-0109 HIGH
Android - Denial of Service in dhd_tcpdata_info_get
CVSS 7.5
CVE-2026-30960 CRITICAL
rssn < 0.2.9 - Arbitrary Code Execution via JIT Compilation Engine
CVE-2026-22760 LOW
Dell Device Management Agent < 26.02 - Denial of Service
CVSS 3.3
CVE-2026-2801 HIGH
Firefox < 148.0 and Thunderbird < 148.0 - Incorrect Boundary Conditions in JavaScript WebAssembly Component
CVSS 7.5
Details
Vulnerabilities 588
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits