CWE-684

CWE-684 · 3 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-684, highest CVSS first.

  1. MEDIUM 6.5CVE-2026-1063612026-10-06

    Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 4.3CVE-2026-1063902026-10-06

    Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

    chrome

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-1190782026-11-09

    Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output. In fact, doFinalize does not change the hash state: calling it again wi…

    AI risk analysis on Exploit-DB.ai →