Weakness (CWE)

CWE-691: Insufficient Control Flow Management

Pillar Draft Mapping discouraged

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Source: MITRE CWE-691

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.9

CVE-2026-115893 Public exploit

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. …

bytecodealliance wasmtime rust wasmtime Debian Ubuntu Azure Linux Wolfi crates.io

Oct 23, 2026
Critical 9.8

CVE-2024-3847

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass co…

Google Chrome chromium chromium Browsers Debian Wolfi

Apr 17, 2024

CWE-691: Insufficient Control Flow Management

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass co…