CWE-20
13,694 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CVEs (13,694)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed...Show more |
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges n...Show more |
1Microsoft 7365 Apps ExcelMicrosoft 365+4 moreSep 17, 2026 Sep 8, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
1Microsoft 7365 Apps ExcelMicrosoft 365+4 moreSep 17, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 10, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 12, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 11, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 6365 Apps Microsoft 365Office 2019+3 moreSep 17, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 11, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 11, 2026 Sep 8, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 7Windows 10 1607 Windows 10 1809Windows Server 2012+4 moreSep 24, 2026 Sep 8, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
1Microsoft 5365 Apps AccessOffice 2019+2 moreSep 10, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 11, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreSep 24, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 14, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreSep 24, 2026 Sep 8, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreSep 24, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreSep 24, 2026 Sep 8, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. |
An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet. |
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for authentication purposes) that is n...Show more |