CWE-939
36 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 36
- Last 12 months
- 24
- Critical
- 0
- Known exploited
- 0
Critical 0High 8Medium 21Low 7Not scored 0
CVEs per yearBy the year they were published
- 20201
- 20211
- 20221
- 20231
- 20246
- 20253
- 202623
Newest CVEs
- CVE-2026-90631
Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables
Apache Software Foundation · Apache OpenOffice
Low3.3 - CVE-2026-91901
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low…
Dell · Alienware Command Center (AWCC)
Low3.5 - CVE-2026-91900
Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme…
Dell · Alienware Command Center (AWCC)
Medium5.8 - CVE-2026-118677
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n-io · n8n
Medium5.9 - CVE-2026-113411
Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
Nerimity · Desktop
Medium5.3 - CVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the…
GEO CORPORATION · "ゲオアプリ" for Android
Medium5.1 - CVE-2026-53418
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an…
Zoom Communications · Zoom Workplace
High8.1 - CVE-2026-92862
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website…
Wavedash Co., Ltd. · Ticket Ryutsu Center
Medium4.6 - CVE-2026-73335
Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the…
Digital Agency · Android App "Myna Point"
Medium4.6 - CVE-2026-21075
Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.
Samsung Mobile · My Galaxy
Medium5.3