CWE-939

CWE-939 · 8 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-939, highest CVSS first.

  1. HIGH 8.1CVE-2026-534182026-10-13

    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.3CVE-2026-113411public PoC2026-10-20

    A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in h…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.9CVE-2026-118677public PoC2026-10-28

    n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the …

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.8CVE-2026-919002026-11-02

    Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerab…

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 5.4CVE-2026-966142026-10-15

    "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclos…

    AI risk analysis on Exploit-DB.ai →

  6. LOW 3.5CVE-2026-919012026-11-02

    Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Si…

    AI risk analysis on Exploit-DB.ai →

  7. LOW 3.3CVE-2026-906312026-11-04

    Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment va…

    openoffice

    AI risk analysis on Exploit-DB.ai →

  8. LOW 3.3CVE-2026-928622026-10-08

    The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent.

    AI risk analysis on Exploit-DB.ai →