Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (12,982)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-28322 - - Jul 2, 2026 Jun 30, 2026 N/A· v4 5.6 MEDIUM· v3 N/A· v2 SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
CVE-2026-14150 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium se...Show more Insufficient validation of untrusted input in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14140 1Google 1Chrome Jul 6, 2026 Jun 30, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14137 1Google 1Chrome Jul 6, 2026 Jun 30, 2026 N/A· v4 4.2 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a cr...Show more Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14135 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium s...Show more Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14131 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chr...Show more Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14130 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Incorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14127 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security sever...Show more Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14122 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severi...Show more Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14120 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromi...Show more Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14118 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromi...Show more Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14117 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive i...Show more Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14116 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML...Show more Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14115 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chro...Show more Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14109 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...Show more Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14106 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft...Show more Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14104 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severi...Show more Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14100 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient data validation in NetworkCache in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14095 1Google 1Chrome Jul 1, 2026 Jun 30, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro...Show more Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2026-14089 1Google 1Chrome Jul 2, 2026 Jun 30, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in PopupBlocker in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chrom...Show more Insufficient validation of untrusted input in PopupBlocker in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)Show less

Previous 1...202122...650 Next