CWE-346

Origin Validation Error

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The product does not properly verify that the source of data or communication is valid.

684 vulnerabilities with CWE-346
CVE-2026-66420 HIGH
MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments
CVSS 8.8
CVE-2026-18016 MEDIUM
Google Chrome for iOS < 151.0.7922.72 - UI Spoofing via Crafted HTML Page
CVSS 4.3
CVE-2026-18000 LOW
Google Chrome on Android < 151.0.7922.72 - Cross-Origin Data Leak via USB Policy Bypass
CVSS 3.1
CVE-2026-17997 LOW
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Passwords Implementation
CVSS 3.1
CVE-2026-17984 LOW
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Crafted HTML Page on Android
CVSS 3.3
CVE-2026-17981 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Blink Inappropriate Implementation
CVSS 4.3
CVE-2026-17977 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via CSS Policy Bypass
CVSS 4.3
CVE-2026-17963 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via SVG Implementation
CVSS 4.3
CVE-2026-17959 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Network Implementation
CVSS 4.3
CVE-2026-17957 LOW
Chrome < 151.0.7922.72 - Cross-Origin Data Leak via CORS Implementation Flaw
CVSS 3.1
CVE-2026-17954 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via MHTML Policy Bypass
CVSS 4.3
CVE-2026-17933 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via DOMStorage
CVSS 4.3
CVE-2026-17927 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Malicious DevTools Extension
CVSS 4.3
CVE-2026-17916 HIGH
Google Chrome - Privilege Escalation
CVSS 7.5
CVE-2026-17911 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via SVG Policy Enforcement
CVSS 4.3
CVE-2026-17910 MEDIUM
Google Chrome on Android < 151.0.7922.72 - Cross-Origin Data Leak via NFC Policy Enforcement
CVSS 4.3
CVE-2026-17905 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via SurfaceCapture Implementation
CVSS 4.3
CVE-2026-17904 MEDIUM
Google Chrome on Android < 151.0.7922.72 - Cross-Origin Data Leak via NFC Policy Enforcement
CVSS 4.3
CVE-2026-17900 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Malicious File in Enterprise Component
CVSS 4.3
CVE-2026-17897 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via ORB Implementation
CVSS 4.3
CVE-2026-17895 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via DataTransfer UI Gesture
CVSS 4.3
CVE-2026-17885 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Paint Implementation
CVSS 4.3
CVE-2026-17880 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Autofill Inappropriate Implementation
CVSS 4.3
CVE-2026-17879 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Autofill Inappropriate Implementation
CVSS 4.3
CVE-2026-17876 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Payments Implementation
CVSS 4.3
Details
Vulnerabilities 684