Known vulnerabilities in Angular - page 2

Vendor: Google
Software: Angular
Software CPE: cpe:2.3:a:google:angular:*:*:*:*:*:*:*:*
Total vulnerabilities: 36
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Angular Angular is affected by 36 known vulnerabilities: 4 high, 24 medium, 8 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50557
CWE-79 Medium
No
No
19.2.22, 20.3.22, 21.2.15, 22.0.0 11.09.2026 SB2026082072
SB2026100514
#VU144424 - Use of Cache Containing Sensitive Information
CVE-2026-50170
CWE-524 Low
No
No
19.2.23, 20.3.22, 21.2.15, 22.0.0 20.08.2026 SB2026082073
#VU144423 - Improper input validation
CVE-2026-46417
CWE-20 Medium
No
No
19.2.22, 20.3.21, 21.2.13, 22.0.1 20.08.2026 SB2026082072
#VU144103 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-88057
CWE-79 Medium
No
No
21.2.20, 22.1.0 18.08.2026 SB2026081844
#VU140087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69149
CWE-79 Low
No
No
20.3.27, 21.2.19, 22.0.7 30.07.2026 SB2026073018
SB2026100513
#VU140086 - Insufficient Verification of Data Authenticity
CVE-2026-68945
CWE-345 High
No
No
20.3.27, 21.2.19, 22.0.2 30.07.2026 SB2026073017
SB2026090808
SB2026091019
#VU140085 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69151
CWE-79 Low
No
No
20.3.27, 21.2.19, 22.0.1 30.07.2026 SB2026073016
SB2026090808
SB2026091022
and 1 more
#VU126504 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32635
CWE-79 Low
No
No
19.2.20, 20.3.18, 21.2.4 20.04.2026 SB2026042029
SB2026072342
#VU126503 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59052
CWE-362 Medium
No
No
18.2.14, 19.2.15, 20.3.0 20.04.2026 SB2026042028
#VU126502 - Server-Side Request Forgery (SSRF)
CVE-2026-41423
CWE-918 High
No
No
19.2.21, 20.3.19, 21.2.9 20.04.2026 SB2026042027
#VU123274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27970
CWE-79 Medium
No
No
19.2.19, 20.3.17, 21.1.6, 21.2.0 26.02.2026 SB2026022601
SB2026060459
SB2026072342
and 2 more
#VU121119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22610
CWE-79 Medium
No
No
19.2.18, 20.3.16, 21.0.7 09.01.2026 SB2026010909
SB2026060459
SB2026080343
and 1 more
#VU118873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-66412
CWE-79 Medium
No
No
19.2.17, 20.3.15, 21.0.2 01.12.2025 SB2025120147
#VU118767 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66035
CWE-200 Medium
No
No
20.3.14, 21.0.1 26.11.2025 SB2025112624
#VU77476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4231
CWE-79 Low
No
No
11.0.5, 11.1.0-next.3 16.06.2023 SB2022052637
SB2023061625
SB2023062315
and 3 more
#VU64151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
11.1.1 10.06.2022 SB2021020224
SB2022061002


Showing elements 21 - 40 out of 36