CWE-939
38 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 38Published CVEs38 of them scored
- 26Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the…
Product not named
Medium6.5 - CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page…
Product not named
Medium5.4 - CVE-2026-90631
Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Apache Software Foundation · Apache OpenOffice
Low3.3 - CVE-2026-91901
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low…
Dell · Alienware Command Center (AWCC)
Low3.5 - CVE-2026-91900
Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme…
Dell · Alienware Command Center (AWCC)
Medium5.8 - CVE-2026-118677
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n-io · n8n
Medium5.9 - CVE-2026-113411
Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
Nerimity · Desktop
Medium5.3 - CVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the…
GEO CORPORATION · "ゲオアプリ" for Android
Medium5.1 - CVE-2026-53418
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an…
Zoom Communications · Zoom Workplace
High8.1 - CVE-2026-92862
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website…
Wavedash Co., Ltd. · Ticket Ryutsu Center
Medium4.6