CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a...4.3 Medium
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for Android5.4 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Networking: HTTP component5.4 Medium
- google chromeUI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote...4.8 Medium
- google chromeUI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a...5.4 Medium
- google chromeUI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a...5.4 Medium
- google chromeUI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a...5.4 Medium
- google chromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote...4.8 Medium
- google chromeUI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57...5.4 Medium
- google chromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a...5.4 Medium
- the browser company of new york arc searchAddress bar spoofing risk in affected Android versions of Arc Search7.4 High
- nozomi networks arcAddress Bar Spoof Risk; Missing Fullscreen Notification via Select Element7.4 High
- google chromeUI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote...5.4 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Navigation component5.4 Medium
- google chromeUI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a...4.2 Medium
- google chromeUI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed...4.8 Medium
- google chromeUI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a...5.4 Medium
- google chromeUI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed...5.4 Medium
- google chromeUI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeUI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...4.2 Medium
- google chromeUI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote...5.4 Medium
- mozilla firefox for ios, firefox mobile +1 moreRepeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS4.3 Medium
- hcl software myxalyticsHCL MyXalytics is affected by multiple security vulnerabilities.3.5 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility vulnerability2.3 Low
- google chromeUI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote...4.3 Medium
- google chromeUI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed...5.4 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the DOM: Core & HTML component4.3 Medium
- mozilla firefox for ios, firefox mobile +1 moreStalled popup navigation could allow address bar origin spoofing in Firefox for iOS5.4 Medium
- google chromeUI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to...6.5 Medium
- google chromeUI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeUI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeUI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed...4.3 Medium
- google chromeUI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeUI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeUI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a...5.4 Medium
- Show moreLoading…