Known vulnerabilities in Angular

Vendor: Google
Software: Angular
Software CPE: cpe:2.3:a:google:angular:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Angular Angular is affected by 15 known vulnerabilities: 2 high, 7 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144424 - Use of Cache Containing Sensitive Information
CVE-2026-50170
CWE-524 Low
No
No
20.3.28, 21.2.20, 22.1.1 20.08.2026 SB2026082073
#VU144423 - Improper input validation
CVE-2026-46417
CWE-20 Medium
No
No
19.2.22, 20.3.21, 21.2.13, 22.0.1 20.08.2026 SB2026082072
#VU144103 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
21.2.20, 22.1.0 18.08.2026 SB2026081844
#VU140087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
20.3.27, 21.2.19, 22.0.7 30.07.2026 SB2026073018
#VU140086 - Insufficient Verification of Data Authenticity
CVE-2026-68945
CWE-345 High
No
No
20.3.27, 21.2.19, 22.0.2 30.07.2026 SB2026073017
#VU140085 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69151
CWE-79 Low
No
No
20.3.27, 21.2.19, 22.0.1 30.07.2026 SB2026073016
#VU126504 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32635
CWE-79 Low
No
No
19.2.20, 20.3.18, 21.2.4 20.04.2026 SB2026042029
SB2026072342
#VU126503 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59052
CWE-362 Medium
No
No
18.2.14, 19.2.15, 20.3.0 20.04.2026 SB2026042028
#VU126502 - Server-Side Request Forgery (SSRF)
CVE-2026-41423
CWE-918 High
No
No
19.2.21, 20.3.19, 21.2.9 20.04.2026 SB2026042027
#VU123274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27970
CWE-79 Medium
No
No
19.2.19, 20.3.17, 21.1.6, 21.2.0 26.02.2026 SB2026022601
SB2026060459
SB2026072342
and 2 more
#VU121119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22610
CWE-79 Medium
No
No
19.2.18, 20.3.16, 21.0.7 09.01.2026 SB2026010909
SB2026060459
SB2026080343
and 1 more
#VU118873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
19.2.17, 20.3.15, 21.0.2 01.12.2025 SB2025120147
#VU118767 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
20.3.14, 21.0.1 26.11.2025 SB2025112624
#VU77476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4231
CWE-79 Low
No
No
11.0.5, 11.1.0-next.3 16.06.2023 SB2022052637
SB2023061625
SB2023062315
and 3 more
#VU64151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
11.1.1 10.06.2022 SB2021020224
SB2022061002