CWE-20

High likelihood

Improper Input Validation

Parent: CWE-707 - Improper Neutralization

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

12,842 vulnerabilities with CWE-20
CVE-2026-10981 MEDIUM
Google Chrome - Improper Input Validation
CVSS 6.5
CVE-2026-10980 MEDIUM
Google Chrome - Improper Input Validation
CVSS 6.5
CVE-2026-10974 CRITICAL
Google Chrome - Improper Input Validation
CVSS 9.6
CVE-2026-10971 CRITICAL
Google Chrome - Improper Input Validation
CVSS 9.6
CVE-2026-10970 HIGH
Google Chrome - Improper Input Validation
CVSS 8.3
CVE-2026-10969 HIGH
Google Chrome - Improper Input Validation
CVSS 7.5
CVE-2026-10968 HIGH
Google Chrome - Improper Input Validation
CVSS 7.4
CVE-2026-10966 CRITICAL
Google Chrome - Improper Input Validation
CVSS 9.6
CVE-2026-10942 HIGH
Google Chrome - Improper Input Validation
CVSS 7.8
CVE-2026-10938 MEDIUM
Google Chrome - Improper Input Validation
CVSS 6.5
CVE-2026-10922 HIGH
Google Chrome - Improper Input Validation
CVSS 8.8
CVE-2026-10920 HIGH
Google Chrome - Improper Input Validation
CVSS 8.3
CVE-2026-10917 HIGH
Google Chrome - Improper Input Validation
CVSS 8.3
CVE-2026-10916 MEDIUM
Google Chrome - Improper Input Validation
CVSS 6.1
CVE-2026-10912 MEDIUM
Google Chrome - Improper Input Validation
CVSS 6.5
CVE-2026-10911 HIGH
Google Chrome - Improper Input Validation
CVSS 8.3
CVE-2026-10904 HIGH
Google Chrome - Arbitrary Code Execution
CVSS 8.8
CVE-2026-36175 MEDIUM
GNCC GP5 v7.1.76 - Authentication Bypass via U-Boot Kernel Boot Argument Injection
CVSS 6.8
CVE-2026-10863 HIGH
MISP User-controlled order parameter in correlations over-correlation endpoint
CVSS 8.1
CVE-2026-37460 HIGH
FRRouting stable/10.0-10.6 - Denial of Service via Crafted BGP UPDATE Message
CVSS 7.5
CVE-2026-35081 HIGH
MBS Gateway Devices V1_0_0_0-V6_0_0_7 - ugw-logstop Process Termination
CVSS 8.1
CVE-2026-47201 HIGH
authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user
CVSS 8.5
CVE-2026-35049 MEDIUM
wire-ios has Persistent Remote DoS via Integer Underflow
CVSS 6.5
CVE-2026-45685 HIGH
OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages
CVSS 7.5
CVE-2026-45678 HIGH
OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads
CVSS 7.5
Details
Vulnerabilities 12,842
Exploit Likelihood High