CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeMemory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...8.8 High
- google chromeMemory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeUse after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeOut of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...6.5 Medium
- google chromeMemory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...9.6 Critical
- google chromeImproper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47...8.8 High
- google chromeMemory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed...6.5 Medium
- google chromeMemory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a...9.6 Critical
- google chromeMemory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeType confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- fenrir sleipnir mobile for androidSleipnir Browser < 3.9.0 Fullscreen Address Bar Spoofing5.1 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the Address Bar component7.3 High
- mozilla firefox, thunderbird +1 moreFrame poisoning in the Layout component8.1 High
- better-authbetter-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device8.5 High
- google chromeUI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed...5.4 Medium
- google chromeUI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a...5.4 Medium
- google chromeUI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed...5.4 Medium
- google chromeUI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a...5.4 Medium
- google chromeUI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a...5.4 Medium
- google chromeUI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed...5.4 Medium
- google chromeUI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39...5.4 Medium
- google chromeUI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a...5.4 Medium
- google chromeUI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...5.4 Medium
- google chromeUI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...5.4 Medium
- mathworks simulinkMathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are...3.6 Low
- Show moreLoading…