CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (838) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (542) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (470) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-704

10 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2023-25737 high 8.8 0.0070 2023-06-02 An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undef
CVE-2023-28162 high 8.8 0.0070 2023-06-02 While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic ty
CVE-2026-6726 high 7.9 0.0019 2026-08-11 An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow
CVE-2026-50337 high 7.8 0.0033 2026-07-14 Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate p
CVE-2026-59871 high 7.5 0.0064 2026-07-08 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-di
CVE-2026-53798 medium 6.9 0.0043 2026-08-13 rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid
CVE-2026-46690 medium 5.8 0.0013 2026-06-12 unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sende
CVE-2026-18675 medium 5.3 0.0056 2026-08-12 The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid head
CVE-2026-73429 medium 5.3 0.0051 2026-08-12 Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a rus
CVE-2026-34379 — &mdash; 0.0028 2026-04-06 OpenEXR provides the specification and reference implementation of the EXR file format, an image sto