CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeIncorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote...3.1 Low
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeIncorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInsufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an...3.1 Low
- google chromeInsufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47...3.1 Low
- google chromeInappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a...4.2 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...6.5 Medium
- google chromeInappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeIncorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allowed a...4.2 Medium
- google chromeInappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- github enterprise serverUI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via undisclosed OAuth scope on consent screen4.8 Medium
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a...3.1 Low
- sensiolabs symfony, symfony html-sanitizer +1 moreSymfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense5.3 Medium
- openclawOpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display8.5 High
- microsoft bing, bing search for android +1 moreMicrosoft Bing Search Spoofing Vulnerability4.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeInsufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53...4.3 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53...4.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeInappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a...5.4 Medium
- google chromeInappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeIncorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeIncorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeIncorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed...6.5 Medium
- google chromeIncorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a...8.8 High
- google chromeIncorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53...8.8 High
- google chromeInappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeInappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53...6.5 Medium
- google chromeInappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53...5.4 Medium
- dräger infinity explorer c700, draeger infinity explorer c700 firmware +1 moreDräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass8.6 High
- google androidIn getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into...7.8 High
- Show moreLoading…