CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed...5.4 Medium
- google chromeUI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeUI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.1 High
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for Android5.4 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid4.7 Medium
- gnome epiphanyEpiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()5.4 Medium
- google chromeInappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72...4.0 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...4.3 Medium
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a...4.3 Medium
- google chromeInsufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72...4.3 Medium
- google chromeInappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed...4.3 Medium
- google chromeInappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a...4.3 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...4.3 Medium
- google chromeIncorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker...4.3 Medium
- google chromeInappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72...4.3 Medium
- google chromeInappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a...3.1 Low
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...4.3 Medium
- google chromeIncorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a...4.3 Medium
- google chromeIncorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote...4.3 Medium
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72...4.3 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...4.3 Medium
- google chromeInappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72...4.3 Medium
- google chromeInappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72...5.4 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...5.4 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...5.4 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...4.3 Medium
- google chromeIncorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...6.5 Medium
- google chromeIncorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a...6.5 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...6.5 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...6.5 Medium
- google chromeInappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a...6.5 Medium
- google chromeInappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72...5.4 Medium
- google chromeInappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72...6.5 Medium
- google chromeInappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72...6.5 Medium
- google chromeIncorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a...4.3 Medium
- google chromeIncorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker...4.3 Medium
- google chromeInsufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0...4.2 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...6.5 Medium
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.5 High
- tanium serverTanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.2.7 Low
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Address Bar component6.5 Medium
- Show moreLoading…