176 matches found
CVE-2026-91900
Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...
CVE-2026-91901
Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 are susceptible to an Improper Authorization in Handler for Custom URL Scheme vulnerability (CWE-939). A low privileged attacker with remote access could exploit this to perform Client-Side Request Forgery . Remediation is available...
EUVD-2026-115459
Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...
CVE-2026-91900
Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...
EUVD-2026-115455
Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...
CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...
CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...
CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...
CVE-2026-113411
A vulnerability exists in Nerimity Desktop up to version 2.2.2 within the Window Open Handler component. Specifically, the shell.openExternal function in src/mainWindow.js fails to properly authorize custom URL schemes when the url argument is manipulated. This flaw allows for remote execution of...
CVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...
EUVD-2026-101935
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...
CVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...
CVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...
CVE-2026-96614
The "ゲオアプリ" application, provided by GEO CORPORATION , is vulnerable to improper authorization within its handler for a custom URL scheme . This flaw allows an attacker to force the application's in-app browser to navigate to an arbitrary website. Such actions could potentially lead to phishing a...
CVE-2026-96614: Improper Authorization in Handler for Custom URL Scheme
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...
PT-2026-114839
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...
CVE-2026-53418
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...
EUVD-2026-98747
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...
CVE-2026-53418
The Zoom Workplace for Android application, specifically versions before 7.2.1 , is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). This flaw may allow an unauthenticated user to perform an escalation of privilege via network access . The CVSS 3.1 score is 8.1 (Hi...
CVE-2026-53418
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...