Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVEs (13,737)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-33211 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 memory corruption in modem due to improper check while calculating size of serialized CoAP message
CVE-2023-26388 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26407 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre...Show more Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26405 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre...Show more Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-28304 1Microsoft 2Odbc Ole Db Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-28302 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 20h2+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-28301 1Microsoft 1Edge Jun 17, 2026 Apr 11, 2023 N/A· v4 3.7 LOW· v3 N/A· v2 Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2023-28291 1Microsoft 1Raw Image Extension Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-28274 1Microsoft 8Windows 10 1809 Windows 10 20h2Windows 10 21h2+5 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-24893 1Microsoft 1Visual Studio Code Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Visual Studio Code Remote Code Execution Vulnerability
CVE-2023-23375 1Microsoft 2Odbc Ole Db Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVE-2023-21554 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 20h2+9 more Jun 17, 2026 Apr 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2022-42477 1Fortinet 1Fortianalyzer Jun 17, 2026 Apr 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom d...Show more An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.Show less
CVE-2023-26293 1Siemens 1Tia Portal Oct 23, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automat...Show more A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.Show less
CVE-2023-26070 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
CVE-2023-26069 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).
CVE-2023-26068 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
CVE-2023-26067 1Lexmark 26Cslbl Firmware Cslbn FirmwareCsnzj Firmware+23 more Jun 17, 2026 Apr 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
CVE-2023-30450 1Redpanda 1Redpanda Jun 17, 2026 Apr 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must re...Show more rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure (while a cluster is turned off) in order to have TLS on broker RPC ports. NOTE: the fix was also backported to the 22.2 and 22.3 branches.Show less
CVE-2023-28710 1Apache 1Apache Airflow Providers Apache Spark Jun 17, 2026 Apr 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

Previous 1...202203204...687 Next