CWE-590

CWE-590 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-590, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-764652026-10-07

    A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code wit…

    AI risk analysis on Exploit-DB.ai →

  2. CRITICAL 9.6CVE-2026-953112026-09-29

    Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    chrome

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.9CVE-2026-106578public PoC2026-10-07

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 …

    AI risk analysis on Exploit-DB.ai →