The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
12,842 vulnerabilities with CWE-20
CVE-2026-13813
HIGH
Google Chrome - Improper Input Validation
CVSS 8.3
CVE-2026-13812
MEDIUM
Google Chrome - Improper Input Validation
CVSS 4.7
CVE-2026-13808
MEDIUM
Chrome for iOS < 150.0.7871.47 - Unauthenticated Sensitive Information Exposure via Physical Access
CVSS 4.6
CVE-2026-13806
HIGH
Google Chrome - Improper Input Validation
CVSS 8.1
CVE-2026-13797
CRITICAL
Google Chrome - Improper Input Validation
CVSS 9.6
CVE-2026-13794
HIGH
Google Chrome - Improper Input Validation
CVSS 7.5
CVE-2026-13791
HIGH
Google Chrome - Improper Input Validation
CVSS 8.1
CVE-2026-13781
CRITICAL
Google Chrome - Improper Input Validation
CVSS 9.6
CVE-2026-13780
CRITICAL
Google Chrome - Improper Input Validation
CVSS 9.6
CVE-2026-13777
HIGH
Google Chrome - Improper Input Validation
CVSS 8.8
CVE-2026-7803
CRITICAL
IBM Langflow OSS - Flow Validation Bypass via Empty Component Type Field
CVSS 9.8
CVE-2026-48315
CRITICAL
ColdFusion | Improper Input Validation (CWE-20)
CVSS 9.3
CVE-2026-48281
CRITICAL
ColdFusion | Improper Input Validation (CWE-20)
CVSS 10.0
CVE-2026-48277
CRITICAL
ColdFusion | Improper Input Validation (CWE-20)
CVSS 10.0
CVE-2026-49434
HIGH
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker
CVSS 7.5
CVE-2026-49432
HIGH
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service
CVSS 7.5
CVE-2026-43725
HIGH
Apple Safari - Improper Input Validation
CVSS 7.1
CVE-2026-43724
HIGH
Apple Ios And iPadOS - Denial of Service
CVSS 7.8
CVE-2026-43722
MEDIUM
Apple Ios And iPadOS - Denial of Service
CVSS 5.5
CVE-2026-43708
MEDIUM
Apple Safari - Improper Input Validation
CVSS 4.3
CVE-2026-39868
CRITICAL
Apple Ios And iPadOS - Denial of Service
CVSS 9.1
CVE-2026-38639
HIGH
relibc - Denial of Service via parse_month Function
CVSS 7.5
CVE-2026-52780
CRITICAL
OpenProject: Cache store poisoning leads to Remote Code Execution (RCE)
CVSS 9.6
CVE-2026-13434
MEDIUM
Red Hat OpenShift Virtualization KubeVirt - Multus Network Annotation Injection
CVSS 4.9
CVE-2026-42390
MEDIUM
PowerDNS Recursor < 5.4.3 - ZONEMD Validation Bypass
CVSS 5.3
Details
Vulnerabilities
12,842
Exploit Likelihood
High