CWE-939.

Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables

• Apache Software Foundation Apache OpenOffice
• CWE-939

Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0…

• Dell Alienware Command Center (AWCC)
• CWE-939

Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0…

• Dell Alienware Command Center (AWCC)
• CWE-939

n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance

• n8n
• CWE-939

Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme

• Nerimity Desktop
• Broken access control
• CWE-939

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.

• GEO CORPORATION "ゲオアプリ" for Android
• GEO CORPORATION "ゲオアプリ" for iOS
• CWE-939

Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android…

• Zoom Communications Zoom Workplace
• CWE-939

Wavedash Co., Ltd. Ticket Ryutsu Center: The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes…

• Wavedash Co., Ltd. Ticket Ryutsu Center
• CWE-939

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939).

• Digital Agency Android App "Myna Point"
• CWE-939

Samsung Mobile My Galaxy: Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3…

• Samsung Mobile My Galaxy
• CWE-939

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

• Samsung Mobile Devices
• CWE-939

Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing

• home-assistant core
• Open redirect
• CWE-939

Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme

• Genspark AI Workspace App
• Broken access control
• CWE-939

Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme

• Moovit Bus & Public Transit App
• Broken access control
• CWE-939

Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…

• Zoom Communications Zoom Workplace
• CWE-939

Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version…

• Zoom Communications Zoom Workplace
• CWE-939

Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme

• Groww Stock, Mutual Fund, Gold App
• Broken access control
• CWE-939

Everpure FlashArray: A flaw exists in FlashArray Purity where insufficient filtering of certain data paths…

• Everpure FlashArray
• CWE-939

Opening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop App

• Mattermost
• CWE-939

@mobilenext/mobile-mcp: Arbitrary Android Intent Execution via mobile_open_url

• CWE-939

<0.0.50 · fixed in 0.0.50

Vikunja Desktop allows arbitrary local application invocation via unvalidated shell.openExternal

• vikunja
• CWE-939

Microsoft Authenticator Information Disclosure Vulnerability

• Microsoft Authenticator for Android
• Microsoft Authenticator for IOS
• CWE-939

Arbitrary application execution via unvalidated server-controlled URLs in Help menu

• Mattermost
• CWE-939

JetBrains TeamCity: In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…

• JetBrains TeamCity
• CWE-939

Improper authorization in handler for custom URL scheme issue in "Yahoo!

• LY Corporation "Yahoo! Shopping" App for Android
• CWE-939

Links using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresses

• Mozilla Firefox for iOS
• CWE-939

SHUEISHA INC. "Shonen Jump+" App for Android: Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for…

• SHUEISHA INC. "Shonen Jump+" App for Android
• CWE-939

SKYLARK HOLDINGS CO., LTD. 'Skylark' App for Android: Improper authorization in handler for custom URL scheme issue in 'Skylark' App for…

• SKYLARK HOLDINGS CO., LTD. 'Skylark' App for Android
• SKYLARK HOLDINGS CO., LTD. 'Skylark' App for iOS
• CWE-939

istyle Inc. "@cosme" App for Android: Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android…

• istyle Inc. "@cosme" App for Android
• istyle Inc. "@cosme" App for iOS
• CWE-939

Rakuten Group, Inc. 'Rakuten Ichiba App' for Android: 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS…

• Rakuten Group, Inc. 'Rakuten Ichiba App' for Android
• Rakuten Group, Inc. 'Rakuten Ichiba App' for iOS
• CWE-939

ZOZO, Inc. 'ZOZOTOWN' App for Android: Improper authorization in handler for custom URL scheme issue in 'ZOZOTOWN' App for…

• ZOZO, Inc. 'ZOZOTOWN' App for Android
• CWE-939

MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme

• MicroDicom DICOM Viewer
• CWE-939

Zoom Video Communications, Inc. Zoom Clients: Improper authorization in some Zoom clients may allow an authorized user to conduct an…

• Zoom Video Communications, Inc. Zoom Clients
• CWE-939

Cisco AppDynamics Controller Authorization Bypass Vulnerability

• Cisco AppDynamics
• CWE-939

Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service

• Juniper Networks Junos OS
• Broken access control
• CWE-551

Improper URL validation in GreenBrowser

• luchua-bc GreenBrowser
• CWE-939