CWE-20: Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeImproper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote...5.9 Medium
- google chromeImproper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a...8.3 High
wings3dUbuntuAn issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted...5.5 Medium- No product listedA vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local...5.5 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Input Validation (CWE-20)3.5 Low
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)8.4 High
- adobe illustrator, illustrator desktop 2025, illustrator desktop 2026 +2 moreIllustrator | Improper Input Validation (CWE-20)8.6 High
- google androidIn AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to...7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office PowerPoint Information Disclosure Vulnerability6.5 Medium
- microsoft access, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Access Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows USB Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows USB Audio Class Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows USB Mass Storage Class Driver Remote Code Execution Vulnerability9.8 Critical
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number...9.3 Critical
- No product listedAn issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC...8.8 High
- mispMISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs5.1 Medium
- hcl software myxalyticsHCL MyXalytics is affected by multiple security vulnerabilities.3.5 Low
- mispMISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL5.1 Medium
- @clerk fastifyfastify vulnerable to request validation bypass via skipped boolean false schemas7.5 High
- @clerk fastifyfastify vulnerable to request body replacement via an async validation result collision8.1 High
- snowflake jdbc driver, jdbc driver (fips), jdbc driver (thin) +2 moreSnowflake JDBC Driver auto-configuration account validation permits credential redirection5.3 Medium
- google chromeImproper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977...9.6 Critical
- mispMISP Event Template Definition Validation Bypass Allows Persistent Denial of Service7.1 High
- mispMISP Dashboard Button Widget Allows Persistent JavaScript URL Injection5.3 Medium
- hickory-dnsHickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser8.7 High
- hickory-dnshickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser8.7 High
- n8nn8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes7.1 High
- jenkins project job configuration history pluginJenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the...5.4 Medium
- google chromeImproper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a...9.8 Critical
- google chromeImproper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote...6.5 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreLocal Privilege Escalation in AOS-CX Command Line Interface7.3 High
- mozilla firefox, firefox mobile +1 moreOther issue in Firefox Focus for Android9.8 Critical
- ash-project ashAsh.Type ignores outer array constraints on nested {:array, {:array, type}} inputs2.1 Low
- ash-project ashAsh.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service5.9 Medium
- ash-project ash typescriptDeclared argument constraints not enforced on AshTypescript typed controller routes6.3 Medium
- google androidIn multiple functions of iommu.c, there is a possible out of bounds read/write due to improper...7.8 High
- google androidIn multiple locations, there is a possible escalation of privilege due to improper input...7.8 High
- google androidIn smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to...6.7 Medium
- google androidIn FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation...8.4 High
- Show moreLoading…