CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- zen-browser desktopZen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing6.3 Medium
- mozilla firefox, firefox for ios +1 moreInterrupted navigation could allow address bar origin spoofing in Firefox for iOS6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- google chromeIncorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an...4.8 Medium
- google chromeInappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote...5.3 Medium
- google chromeIncorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...4.2 Medium
- google chromeIncorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 150.0.7871.47 allowed a...5.4 Medium
- google chromeIncorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0...4.3 Medium
- google chromeInappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47...4.2 Medium
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...4.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote...5.4 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47...4.2 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.3 Medium
- google chromeInappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeIncorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeIncorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47...7.5 High
- google chromeInappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Select in Google Chrome on Mac prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed...4.3 Medium
- google chromeInappropriate implementation in File Input in Google Chrome prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in SplitView in Google Chrome on Linux prior to 150.0.7871.47...4.2 Medium
- google chromeIncorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a...4.2 Medium
- google chromeIncorrect security UI in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeIncorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a...4.2 Medium
- google chromeIncorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed a...4.2 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeInsufficient validation of untrusted input in Autofill in Google Chrome on Android prior to 150.0...4.3 Medium
- google chromeInappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0...4.3 Medium
- google chromeIncorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote...4.2 Medium
- google chromeInappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a...4.2 Medium
- google chromeInsufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...4.3 Medium
- google chromeInappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote...5.3 Medium
- google chromeInappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...6.5 Medium
- google chromeIncorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a...4.3 Medium
- google chromeInappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47...4.2 Medium
- google chromeInappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a...6.5 Medium
- google chromeIncorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...4.2 Medium
- Show moreLoading…