CWE-357: Insufficient UI Warning of Dangerous Operations
The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible... 4.7 Medium
- jetbrains toolbox app In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting... 3.1 Low
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 4.3 Medium
- siber systems, inc. android app "roboform password manager" Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents... 4.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Remote Desktop Spoofing Vulnerability 7.1 High
- microsoft edge, edge (chromium-based) +1 more Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability 4.7 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +6 more +8 more Remote Desktop Spoofing Vulnerability 8.1 High
- xwiki, xwiki xwiki-platform +1 more XWiki does not require right warnings for notification displayer objects 6.4 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki does not require right warnings for XClass definitions 8.6 High
- xwiki, xwiki xwiki-platform +1 more XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right 5.1 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki's required right warnings for macros are incomplete 8.6 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 5.4 Medium
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 more Microsoft Office Visio Remote Code Execution Vulnerability 7.8 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 5.4 Medium
- microsoft edge, edge (chromium-based) +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 4.3 Medium
- microsoft edge, edge for android +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Spoofing Vulnerability 2.5 Low
- microsoft edge chromium, edge (chromium-based), edge (chromium-based) extended stable +2 more Microsoft Edge for Android Spoofing Vulnerability 5.3 Medium
- element, vector-im element-ios +1 more Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessions 6.4 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +10 more +12 more Microsoft Excel Security Feature Bypass Vulnerability 7.8 High
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 more Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion... 7.8 High
- rockwell automation arena simulation software, rockwellautomation arena +1 more A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena... 7.8 High