CWE-20 · Improper Input Validation (page 6)
Page 6 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70603 | Medium | 6.0 | 2026-08-05 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, she… |
CVE-2026-46334 | | 2026-08-05 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the S… | |
CVE-2026-70589 | Medium | 4.8 | 2026-08-04 | Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no lon… |
CVE-2026-16793 | High | 8.8 | 2026-08-04 | An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that… |
CVE-2026-18801 | | 2026-08-04 | OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create o… | |
CVE-2026-11835 | | 2026-08-04 | Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra Core ROM (UpdateResetFlow::run()) in subsystem mode allows… | |
CVE-2026-67978 | High | 7.5 | 2026-08-03 | An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame. |
CVE-2026-67974 | High | 7.5 | 2026-08-03 | A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial… |
CVE-2026-67969 | High | 7.5 | 2026-08-03 | An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl en… |
CVE-2026-69198 | | 2026-08-03 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method i… | |
CVE-2026-69192 | | 2026-08-03 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading z… | |
CVE-2026-69185 | High | 7.5 | 2026-08-03 | Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can ma… |
CVE-2026-21555 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21554 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21553 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21552 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21551 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21550 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21549 | High | 7.5 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
CVE-2026-21548 | High | 7.5 | 2026-08-03 | In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed. |
CVE-2026-59650 | Critical | 9.1 | 2026-08-03 | In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73… |
CVE-2025-71399 | High | 8.6 | 2026-08-02 | Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path… |
CVE-2026-67330 | Critical | 9.9 | 2026-08-01 | @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-beta.9 contain an authorization bypas… |
CVE-2026-67326 | High | 7.0 | 2026-08-01 | GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section header… |
CVE-2026-67296 | High | 7.5 | 2026-08-01 | FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stre… |
CVE-2026-54909 | Medium | 5.3 | 2026-07-31 | pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in… |
CVE-2026-53551 | | 2026-07-31 | free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not validate the supiOr… | |
CVE-2026-53503 | High | 7.5 | 2026-07-31 | Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(<matrix>, <columns>, <should_normalize>) filter p… |
CVE-2025-62347 | Medium | 4.3 | 2026-07-31 | HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was… |
CVE-2026-18217 | Low | 3.4 | 2026-07-31 | A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handle… |
CVE-2026-18211 | Medium | 4.2 | 2026-07-31 | A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requireme… |
CVE-2026-18206 | Low | 3.7 | 2026-07-31 | A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administ… |
CVE-2026-65834 | Medium | 6.8 | 2026-07-30 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and Capsule… |
CVE-2026-59881 | | 2026-07-30 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the… | |
CVE-2026-18014 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via… |
CVE-2026-18009 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious… |
CVE-2026-18002 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pr… |
CVE-2026-17991 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-17990 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17988 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17987 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… |
CVE-2026-17982 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted… |
CVE-2026-17970 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform… |
CVE-2026-17955 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted H… |
CVE-2026-17940 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromis… |
CVE-2026-17939 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious… |
CVE-2026-17937 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via… |
CVE-2026-17934 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via… |
CVE-2026-17930 | High | 7.5 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17929 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via… |
CVE-2026-17926 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in spec… |
CVE-2026-17921 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17909 | Medium | 5.3 | 2026-07-30 | Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via… |
CVE-2026-17908 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the ren… |
CVE-2026-17906 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc… |
CVE-2026-17901 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restric… |
CVE-2026-17893 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… |
CVE-2026-17890 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17888 | High | 7.1 | 2026-07-30 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape v… |
CVE-2026-17870 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origi… |
CVE-2026-17867 | High | 7.1 | 2026-07-30 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape vi… |
CVE-2026-17861 | High | 7.8 | 2026-07-30 | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation… |
CVE-2026-17860 | Low | 3.3 | 2026-07-30 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the O… |
CVE-2026-17848 | Critical | 9.6 | 2026-07-30 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file… |
CVE-2026-17847 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape v… |
CVE-2026-17844 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origi… |
CVE-2026-17837 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17834 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc… |
CVE-2026-17831 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc… |
CVE-2026-17814 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation rest… |
CVE-2026-17809 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17806 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17803 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… |
CVE-2026-17799 | Medium | 5.4 | 2026-07-30 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access co… |
CVE-2026-17795 | Medium | 4.3 | 2026-07-30 | Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak… |
CVE-2026-17794 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the rende… |
CVE-2026-17791 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17789 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation rest… |
CVE-2026-17786 | High | 8.8 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious… |
CVE-2026-17774 | High | 7.5 | 2026-07-30 | Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potent… |
CVE-2026-17773 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HT… |
CVE-2026-17769 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HT… |
CVE-2026-17768 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17767 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend… |
CVE-2026-17766 | Low | 3.3 | 2026-07-30 | Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data v… |
CVE-2026-17761 | Medium | 5.4 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scrip… |
CVE-2026-17749 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a maliciou… |
CVE-2026-17747 | Medium | 4.2 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the ren… |
CVE-2026-17741 | High | 7.1 | 2026-07-30 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a san… |
CVE-2026-17738 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17736 | Medium | 5.8 | 2026-07-30 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend… |
CVE-2026-17735 | High | 8.7 | 2026-07-30 | Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proces… |
CVE-2026-17713 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised th… |
CVE-2026-17706 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the render… |
CVE-2026-17700 | Medium | 4.3 | 2026-07-30 | Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process… |
CVE-2026-17698 | High | 7.5 | 2026-07-30 | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a cr… |
CVE-2026-17690 | Medium | 6.5 | 2026-07-30 | Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a c… |
CVE-2026-17686 | High | 8.1 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc… |
CVE-2026-17684 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the r… |
CVE-2026-17681 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromis… |