CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows, windows 11 23h2 +1 moreMicrosoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability7.0 High
- mozilla firefoxAddress bar spoofing using an blob URI on Firefox for Android4.3 Medium
- mozilla firefoxSpoofing issue in the Address Bar component6.5 Medium
- mozilla firefoxSpoofing issue in the Address Bar component of Firefox Focus for Android6.5 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability4.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a...4.3 Medium
- google chromeInsufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66...4.3 Medium
- apple ipados, safari, ios and ipados +1 more +3 moreThe issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6....4.3 Medium
- jhipsterWithdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter2.9 Low
- mozilla firefoxIncorrect URL truncation in Firefox for Android5.3 Medium
- mozilla firefox, thunderbird +1 moreIncorrect URL truncation9.8 Critical
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.3 Medium
- minio operatorOpenAI Operator - API Spoofing through Locking Operator on FullScreen6.9 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap clickjacking5.4 Medium
- mozilla thunderbirdUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 Medium
- google chromeInappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55...6.5 Medium
- google chromeInappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55...6.5 Medium
- gitlabUser Interface (UI) Misrepresentation of Critical Information in GitLab3.5 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.5 Medium
- mozilla firefox focus, focus +1 moreFirefox Focus elide URL allows address bar spoofing6.1 Medium
- mozilla firefox, thunderbird +1 moreSpecially crafted filename could be used to obscure download type6.5 Medium
- busybox, siemens ruggedcom rst2428p +1 moreIn tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through...3.2 Low
- mozilla thunderbirdUser Interface (UI) Misrepresentation of attachment URL6.4 Medium
- dnnsoftware dotnetnuke, dnn.platform +1 moreUnexpected external content may be displayed in DNN ImageHandler4.3 Medium
- microsoft edge, edge for ios +1 moreMicrosoft Edge for iOS Spoofing Vulnerability4.7 Medium
- google chromeInappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a...5.4 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote...5.4 Medium
- google chromeInappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a...5.4 Medium
- apple ipados, macos, safari +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and...4.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA clickjacking issue was addressed with improved out-of-process view handling. This issue is...2.8 Low
- google chromeInappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35...4.3 Medium
- mozilla firefox, thunderbird +1 moreClickjacking the registerProtocolHandler info-bar4.3 Medium
- microsoft outlook, outlook for android +1 moreMicrosoft Outlook Spoofing Vulnerability5.3 Medium
- microsoft edge, edge for ios, edge for android +2 moreMicrosoft Edge for IOS and Android Spoofing Vulnerability5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- ibm applinxIBM ApplinX Clickjacking5.4 Medium
- google chromeInappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a...6.3 Medium
- tp-link tl-sg108eTP-Link TL-SG108E clickjacking6.9 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a...4.3 Medium
- google chromeInappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83...6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows SmartScreen Spoofing Vulnerability6.5 Medium
- ibm iIBM PowerHA SystemMirror for i clickjacking5.4 Medium
- huawei fusioncomputeThere is an improper interface design vulnerability in Huawei product. A module interface of the...8.8 High
- phpmyfaqphpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames4.9 Medium
- documenso, documenso saas (hosted) +1 morePDF Document Spoofing in Documenso8.2 High
- dropbox(hellosign) dropbox signPDF Document Spoofing in DropBox Sign(HelloSign)8.2 High
- docusignAI Assistant PDF Document Spoofing in DocuSign8.2 High
- docusealPDF Document Spoofing in DocuSeal8.2 High
- Show moreLoading…