CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- hisense vidaa Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI 4.8 Medium
- google chrome UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38... 5.4 Medium
- google chrome UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a... 5.4 Medium
- google chrome UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote... 5.9 Medium
- google chrome UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote... 5.4 Medium
- google chrome UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote... 5.4 Medium
- google chrome UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a... 5.4 Medium
- google chrome UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote... 5.4 Medium
- google chrome UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote... No score
- google chrome UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103... 5.4 Medium
- google chrome UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... No score
- google chrome UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 5.4 Medium
- google chrome UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a... 5.4 Medium
- google chrome UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a... 5.4 Medium
- google chrome UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote... 5.4 Medium
- google chrome UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a... 5.4 Medium
- google chrome UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 5.4 Medium
- google chrome UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a... 5.4 Medium
- google chrome UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 5.4 Medium
- google chrome UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote... No score
- google android An unprivileged application can exploit a lack of package/signature validation in SystemUI's ... 7.8 High
- google android In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a... 4.0 Medium
- google android In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic... 7.8 High
- google android In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user... 8.4 High
- google android In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of... 8.4 High
- google android In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or... 8.4 High
- google android In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due... 8.4 High
- google android In multiple locations, there is a possible way to trick a user into accepting a permission due to... 8.4 High
- google android In multiple locations, there is a possible way to trick a user into disclosing Autofill contents... 8.4 High
- maxthon technology limited browser for android Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing 5.1 Medium
- mozilla firefox Frame poisoning in the Layout component 9.1 Critical
- mozilla firefox Spoofing issue in the Downloads component in Firefox for Android 8.8 High
- mozilla firefox, thunderbird +1 more Frame poisoning in the CSS Parsing and Computation component 8.8 High
- mozilla firefox, thunderbird +1 more Spoofing issue in the DOM: Core & HTML component 4.7 Medium
- mozilla firefox for ios External protocol handler (tel:) address bar spoof 5.4 Medium
- mozilla firefox for ios Facetime protocol handler enabled spoofing 5.4 Medium
- google chrome Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 8.8 High
- google chrome Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed... 9.6 Critical
- google chrome Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 8.8 High
- google chrome Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47... 8.8 High
- google chrome Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 8.8 High
- google chrome Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- Show olderLoading…