CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into...7.8 High
- google androidIn multiple locations, there is a possible misleading UI due to obfuscation. This could lead to...7.8 High
- google androidIn getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security...7.8 High
- sensiolabs symfony, symfony html-sanitizer +1 moreSymfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing2.3 Low
- puttyPuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but...3.1 Low
- mozilla firefox, firefox for ios +1 moreFirefox iOS RTL Domain Rendering Issue in Link Preview5.4 Medium
- google chromeInappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a...4.2 Medium
- triliumnext triliumTrilium Notes: macOS TCC Bypass via Prompt Spoofing5.5 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Popup Blocker component7.5 High
- google chromeInappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a...4.2 Medium
- google chromeInappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed...4.7 Medium
- google chromeIncorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168...4.2 Medium
- google chromeIncorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote...5.4 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability4.3 Medium
- microsoft edge chromium, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability6.5 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability4.3 Medium
- sap se sapui5 (search ui)Content Spoofing vulnerability in SAPUI5 (Search UI)4.7 Medium
- apple ipados, visionos, ios and ipados +1 more +3 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...7.5 High
- zen-browser desktopZen Browser Mac - Address Bar Spoofing via Long Subdomain4.7 Medium
- google chromeInsufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a...5.4 Medium
- google chromeInappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote...5.4 Medium
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an...5.4 Medium
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an...5.4 Medium
- google chromeInappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote...5.4 Medium
- hcl bigfix runbookaiHCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability8.8 High
- uutils coreutilsuutils coreutils id Misleading Identity Reporting in Pretty Print Mode3.3 Low
- line corporation client for ios, linecorp line, ly corporation line client for ios +2 moreLINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where...7.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability5.4 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a...4.3 Medium
- google chromeIncorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a...6.5 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote...4.3 Medium
- google chromeIncorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote...4.3 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote...5.4 Medium
- google chromeInsufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a...4.3 Medium
- google chromeIncorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a...4.3 Medium
- google chromeIncorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...4.3 Medium
- mozilla thunderbirdSpoofing issue in Thunderbird6.5 Medium
- cryptomator android, cryptomator +1 moreCryptomator for Android: Tampered vault configuration allows MITM attack on Hub API7.6 High
- cisco ios, cryptomator +1 moreCryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API7.6 High
- cryptomatorCryptomator: Tampered vault configuration allows MITM attack on Hub API7.6 High
- microsoft edge chromium, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability5.0 Medium
- openclawOpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands7.3 High
- google chromeIncorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a...4.3 Medium
- google chromeIncorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a...6.5 Medium
- google chromeIncorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a remote...6.5 Medium
- google chromeInsufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an...4.3 Medium
- google chromeIncorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a...4.3 Medium
- Show moreLoading…