CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeIncorrect security UI in LookalikeChecks in Google Chrome on Android prior to 146.0.7680.71...4.3 Medium
- mozilla focus for ios, firefox focus +1 moreAttacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect4.3 Medium
- open-emr openemrOpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and Portal7.2 High
- mozilla firefox, firefox for ios +1 moreSpoofed web content presented under trusted domains using scripted navigation on Firefox iOS9.8 Critical
- opentext directory servicesContent spoofing vulnerability discovered in OpenText™ Directory Services5.3 Medium
- openclawOpenClaw macOS deep link confirmation truncation can conceal executed agent message7.1 High
- mozilla firefox, firefox for ios +1 moreInterrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS4.3 Medium
- google chromeInappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a...4.3 Medium
- google chromeInappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a...5.4 Medium
- google chromeInappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a...6.5 Medium
- google chromeInappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed...6.5 Medium
- google chromeInsufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a...6.5 Medium
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility vulnerability2.3 Low
- google chromeIncorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote...9.8 Critical
- google chromeIncorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote...9.8 Critical
- google chromeIncorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a...5.4 Medium
- google chromeInappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed...5.4 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability5.5 Medium
- microsoft edge chromium, edge for android +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability3.1 Low
- mozilla firefox, firefox for ios +1 moreFilename spoofing via Unicode Right-to-Left Override in Firefox for iOS6.5 Medium
- line corporation client for ios, linecorp line +1 moreLINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the...3.1 Low
- line corporation client for ios, linecorp line +1 moreThe in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar...4.3 Medium
- line corporation client for android, linecorp line +1 moreLINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in...5.4 Medium
- line corporation client for android, linecorp line +1 moreLINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app...3.4 Low
- apple macos, visionos, watchos +1 more +3 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...6.5 Medium
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) for Mac Spoofing Vulnerability4.3 Medium
- apple macos, safari +1 moreA spoofing issue was addressed with improved truncation when displaying the fully qualified...4.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60...4.3 Medium
- google chromeInappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998...4.3 Medium
- google chromeInappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58...4.3 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Defacement - SA-CORE-2025-0074.3 Medium
- google chromeInappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137...4.2 Medium
- google chromeInappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137...4.2 Medium
- google chromeIncorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote...4.2 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a...5.4 Medium
- mozilla firefoxSpoofing risk in Android custom tabs8.1 High
- mozilla firefoxAddress bar could be spoofed on Android using visibilitychange6.5 Medium
- google chromeInappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54...6.3 Medium
- google chromeInappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54 allowed...6.3 Medium
- google chromeInappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote...6.3 Medium
- wso2 api manager, identity server, identity server as key manager +2 moreContent Spoofing in Multiple WSO2 Products via Error Message Injection4.3 Medium
- mozilla focus for ios, firefox focus +1 moreOpening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites6.5 Medium
- apple macos, safari +1 moreThe issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe...6.5 Medium
- google chromeInappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a...4.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a...4.3 Medium
- google chromechromium - security update5.4 Medium
- google chromechromium - security update5.4 Medium
- Show moreLoading…