Weakness (CWE)

CWE-346: Origin Validation Error

Class Draft

The product does not properly verify that the source of data or communication is valid.

Source: MITRE CWE-346

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 5.4

CVE-2026-74970 Public exploit

Site isolation issue in the Graphics component

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Aug 18, 2026
Medium 6.5

CVE-2026-43700 Public exploit

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Jun 29, 2026
Medium 5.4

CVE-2026-20643 Public exploit

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgro…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 17, 2026
Medium 5.4

CVE-2026-25604 Public exploit

Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML…

Apache Software Foundation Apache Airflow Providers Amazon apache-airflow-providers-amazon PyPI

Mar 9, 2026
Medium 4.1

CVE-2025-43929 Public exploit

open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that m…

kitty project kitty kitty kitty Debian Ubuntu

Apr 20, 2025